Hewlett Packard EnterpriseCVE-2026-76695
Hewlett Packard Enterprise EdgeConnect SD-WAN Gateways: buffer overflow
Medium6.5CVE-2026-76695 · Published Sep 15, 2026 · updated Sep 16, 2026
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the integrity and availability of the affected service.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| EdgeConnect SD-WAN Gateways Product | >= 9.7.0.0, <= 9.7.0.0 | No fix yet |
| >= 9.6.0.0, <= 9.6.3.1 | No fix yet | |
| >= 9.5.0.0, <= 9.5.8.1 | No fix yet | |
| >= 9.4.0.0, <= 9.4.8.2 | No fix yet |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-120
More Hewlett Packard Enterprise advisories
All Hewlett Packard Enterprise| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 15 | Hewlett Packard Enterprise EdgeConnect SD-WAN Gateways: information disclosure | Medium4.3 | No fix yet |
| Sep 15 | Hewlett Packard Enterprise EdgeConnect SD-WAN Gateways: buffer overflow | Medium5.5 | No fix yet |
| Sep 15 | Hewlett Packard Enterprise EdgeConnect SD-WAN Gateways: information disclosure | Medium5.3 | No fix yet |
| Sep 15 | Hewlett Packard Enterprise EdgeConnect SD-WAN Gateways: command injection | Medium6.5 | No fix yet |
| Sep 15 | Hewlett Packard Enterprise EdgeConnect SD-WAN Gateways: buffer overflow | Medium6.4 | No fix yet |
| Sep 15 | Hewlett Packard Enterprise EdgeConnect SD-WAN Gateways: denial of service | Medium5.9 | No fix yet |