CVE-2026-76676
HighCVSS 8.8Summary
Buffer overflow vulnerability in the underlying operating system of EdgeConnect SD-WAN Gateways. An unauthenticated adjacent attacker could execute arbitrary code if certain preconditions outside the attacker's control are met. Successful exploitation could lead to complete system compromise.
Risk Assessment
Risk of complete system compromise by an attacker from the local network, potentially leading to loss of confidentiality, integrity, and availability of data and services.
Recommendation
Apply available security patches from the vendor and restrict local network access to EdgeConnect devices. Monitor vendor security advisories.
Other vulnerabilities in EdgeConnect SD-WAN Gateways
See all- CVE-2026-76677High
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
- CVE-2026-76675Critical
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. An authenticated remote attacker with high privileges can execute arbitrary commands on the underlying operating system, leading to complete system compromise.
- CVE-2026-76674Critical
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. An unauthenticated remote attacker can execute arbitrary code, leading to complete system compromise.
Original NVD description (English source)
Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.