Arubanetworks Edgeconnect Sd-Wan Orchestrator vulnerabilities

CVE-2026-76674 [CRITICAL] CWE-120 CVE-2026-76674: Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConne Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

CVE-2026-76673 [CRITICAL] CWE-287 CVE-2026-76673: Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potent Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

CVE-2025-37184 [CRITICAL] CWE-287 CVE-2025-37184: A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacke A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby compromising the integrity of secured access to the syst

CVE-2026-76678 [HIGH] CWE-269 CVE-2026-76678: A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low- A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

CVE-2026-76669 [CRITICAL] CWE-269 CVE-2026-76669: Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestra Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.

CVE-2026-76670 [CRITICAL] CWE-269 CVE-2026-76670: Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestra Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.

CVE-2026-76672 [CRITICAL] CWE-200 CVE-2026-76672: A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configu A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of s

CVE-2026-76675 [CRITICAL] CWE-77 CVE-2026-76675: A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateway A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise.

CVE-2024-22443 [HIGH] CWE-1321 CVE-2024-22443: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system com

CVE-2026-76683 [HIGH] CWE-120 CVE-2026-76683: Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gatew Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on

CVE-2024-41136 [HIGH] CWE-78 CVE-2024-41136: An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-W An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.

CVE-2026-76677 [HIGH] CWE-269 CVE-2026-76677: A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful ex A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.

CVE-2026-76687 [HIGH] CWE-269 CVE-2026-76687: A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

CVE-2026-76684 [HIGH] CWE-287 CVE-2026-76684: Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator th Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchest

CVE-2026-76676 [HIGH] CWE-121 CVE-2026-76676: Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gatew Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the

CVE-2026-76685 [HIGH] CWE-190 CVE-2026-76685: A vulnerability exists in the proxy packet processing logic of the affected component where it impro A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful exploitation could result in a buffer overflow, potentia

CVE-2026-76680 [HIGH] CWE-918 CVE-2026-76680: Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenti Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of

CVE-2026-76681 [HIGH] CWE-284 CVE-2026-76681: A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote at A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's existing privilege level. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access t

CVE-2026-76682 [HIGH] CWE-120 CVE-2026-76682: A vulnerability in the network security monitoring component of intrusion detection systems could al A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on the system.

CVE-2023-37424 [HIGH] CWE-94 CVE-2023-37424: A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands o