PT-2026-92434

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description Buffer overflow vulnerabilities in the underlying operating system could allow an unauthenticated remote attacker to execute arbitrary code. A buffer overfl...

PT-2026-92466

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Orchestrator affected versions not specified Description An issue in the API endpoint allows an unauthenticated remote attacker to obtain sensitive information. This could lead to the disclosure of...

PT-2026-92453

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service against certain services running on impacted Gateways...

PT-2026-92431

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Orchestrator affected versions not specified Description Privilege escalation flaws exist in the API of the system. A remote low-privileged authenticated user can exploit these authorization bypass issues to...

PT-2026-92462

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description A flaw in the operating system allows an authenticated local attacker to trigger a denial-of-service. This could disrupt system operations and lead to an...

PT-2026-92438

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description A flaw in the API endpoint allows a low-privilege authenticated remote attacker to escalate privileges. This could lead to the execution of arbitrary system...

CVE-2026-76699: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted...

CVE-2026-76683: Buffer Copy without Checking Size of Input

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation...

CVE-2026-76700: Uncontrolled Resource Consumption

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service...

PT-2026-92460

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description An issue exists that could allow an unauthenticated remote attacker to cause a denial-of-service, potentially interrupting the normal operation of the...

CVE-2026-76698: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

CVE-2026-76692: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service system crash or the...

CVE-2026-76690: Improper Neutralization of Special Elements used in an OS Command

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could...

CVE-2026-76702: Uncontrolled Resource Consumption

A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...

CVE-2026-76686: Uncontrolled Resource Consumption

A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to conduct a denial-of-service attack on the affected service...

CVE-2026-76703: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of service. Successful exploitation could allow an attacker to disrupt system...

HPESBNW05135 rev.1 - Multiple Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways & Orchestrator

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba EdgeConnect Enterprise Orchestration Software - Please refer to the "Vulnerability Summary" section for details about affected software versions Aruba EdgeConnect...

HPESBNW05136 rev.1 - HPE Networking Advance Notification of Security Advisory for September 22, 2026

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine - Information about the impacted software version will be provided when the PSA is published on September 22. - HPE Networking will not...

HPESBNW05139 rev.1 - HPE Networking Advance Notification of Security Advisories for September 9, 2026

Potential Security Impact: Remote: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager N/A RESOLUTION Customers are strongly advised to immediately secure their deployments by preparing to upgrade the devices as applicable to on...

CVE-2026-73733

Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to circumvent existing authentication controls. Successful exploitation could allow an attacker to retain limited access to the affected system after that access should ha...