Skip to content
OpenAdvisories
High · 7.2 CVE-2026-76691 EUVD-2026-79217GHSA-mqcf-957p-7252

Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API Endpoint

Published Sep 15, 2026 · Updated Sep 22, 2026 · Assigned by hpe

Description

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways 9.7.0.0 – ≤ 9.7.0.0, 9.6.0.0 – ≤ 9.6.3.1, 9.5.0.0 – ≤ 9.5.8.1, 9.4.0.0 – ≤ 9.4.8.2 —

Advisories 1

References