Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-76705 EUVD-2026-79231GHSA-c29r-v5qp-j7m7

Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways

Published Sep 15, 2026 · Updated Sep 15, 2026 · Assigned by hpe

Description

A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways 9.7.0.0 – ≤ 9.7.0.0, 9.6.0.0 – ≤ 9.6.3.1, 9.5.0.0 – ≤ 9.5.8.1, 9.4.0.0 – ≤ 9.4.8.2 —

Advisories 1

References