Threat Intelligence Database

A vulnerability exists in the web-based management interface of Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator. This flaw could allow an unauthenticated remote attacker to bypass authentication controls and gain administrative privileges. Exploitation of this vulnerability could lead to full compromise of the EdgeConnect SD-WAN Orchestrator host. The affected versions include 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and exactly 9.7.0. The vulnerability has a CVSS v3.1 base score of 7.5, indicating high severity. No known exploits are reported in the wild, and no patch or remediation information is provided in the available data.

A vulnerability in the API of Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator allows an unauthenticated remote attacker to bypass authentication controls. Exploiting this flaw could grant administrative privileges, leading to full compromise of the EdgeConnect SD-WAN Orchestrator host. The affected versions include 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and version 9.7.0. The vulnerability has a high severity with a CVSS score of 8.1. No information about available patches or vendor advisories is provided. No known exploits are reported in the wild.

CVE-2026-76679 is a high-severity vulnerability in Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways. It allows an unauthenticated adjacent attacker to perform denial-of-service attacks that can crash the system. Once crashed, the system requires manual intervention to reboot, causing disruption to network operations.

CVE-2026-76676 is a high-severity buffer overflow vulnerability in Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways. It allows an unauthenticated adjacent attacker to execute arbitrary code with privileged access on the underlying operating system if certain conditions outside the attacker's control are met. This could lead to complete system compromise. The affected versions include 9.4.0.0 through 9.4.8.2, 9.5.0.0 through 9.5.8.1, 9.6.0.0 through 9.6.3.1, and exactly 9.7.0.0. No information about available patches or vendor advisories is provided. No known exploits in the wild have been reported.

A critical vulnerability (CVE-2026-76673) exists in the API of Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator. This flaw allows an unauthenticated remote attacker to bypass authentication controls and gain administrative privileges. Exploitation could lead to full compromise of the EdgeConnect SD-WAN Orchestrator host. The affected versions include 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and version 9.7.0. The vulnerability has a CVSS 3.1 base score of 9.8, indicating critical severity. No known exploits in the wild have been reported, and no patch or remediation information is provided in the data.

CVE-2026-76699 is a buffer overflow vulnerability in a system service of the underlying OS for HPE EdgeConnect SD-WAN Gateways. It allows an unauthenticated adjacent attacker to cause a denial-of-service by crashing the impacted service, temporarily disrupting network operations. The vulnerability affects specific versions of the product ranging from 9.4.0.0 through 9.7.0.0. The severity is rated medium with a CVSS score of 6.4.

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.

CVE-2026-76672 is a critical vulnerability in Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways. It affects multiple versions from 9.4.0 through 9.7.0. An authenticated remote attacker with read-only privileges can exploit this flaw by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation may disclose sensitive configuration information, including third-party API tokens and credentials, which could facilitate lateral movement to external security platforms.