CVE-2026-76692
published 2026-09-15CVE-2026-76692: A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and…
PriorityP432high7.1CVSS 3.1
AVAACLPRNUINSUCLINAH
EPSS
0.28%
18.2th percentile
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator | — | — |
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.4.0 < 9.4.11 | 9.4.11 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.5.0 < 9.5.9 | 9.5.9 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.6.0 < 9.6.4 | 9.6.4 |
| hewlett_packard_enterprise | edgeconnect_sd-wan_gateways | 9.4.0.0 – 9.4.8.2 | — |
| hewlett_packard_enterprise | edgeconnect_sd-wan_gateways | 9.5.0.0 – 9.5.8.1 | — |
| hewlett_packard_enterprise | edgeconnect_sd-wan_gateways | 9.6.0.0 – 9.6.3.1 | — |
| hewlett_packard_enterprise | edgeconnect_sd-wan_gateways | 9.7.0.0 – 9.7.0.0 | — |
| hpe | edgeconnect_operating_system | — | — |
| hpe | edgeconnect_operating_system | >= 9.4.0.0 < 9.4.9.0 | 9.4.9.0 |
| hpe | edgeconnect_operating_system | >= 9.5.0.0 < 9.5.9.0 | 9.5.9.0 |
| hpe | edgeconnect_operating_system | >= 9.6.0.0 < 9.6.4.0 | 9.6.4.0 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affecte
ghsa_unreviewed·2026-09-15
CVE-2026-76692 [HIGH] CWE-200 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affecte
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.
VulDB
HPE EdgeConnect SD-WAN Gateways up to 9.4.8.2/9.5.8.1/9.6.3.1/9.7.0.0 missing initialization (EUVD-2026-79218)
vuldb·2026-09-15·CVSS 7.1
CVE-2026-76692 [HIGH] HPE EdgeConnect SD-WAN Gateways up to 9.4.8.2/9.5.8.1/9.6.3.1/9.7.0.0 missing initialization (EUVD-2026-79218)
A vulnerability was found in HPE EdgeConnect SD-WAN Gateways up to 9.4.8.2/9.5.8.1/9.6.3.1/9.7.0.0. It has been classified as critical. The affected element is an unknown function. Performing a manipulation results in missing initialization of a variable.
This vulnerability is cataloged as CVE-2026-76692. It is possible to initiate the attack remotely. There is no exploit available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-15
Published