CVE-2026-76674 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying...

EUVD-2026-79199

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

CVE-2026-76673

EdgeConnect SD-WAN Orchestrator (HPE) is affected by authentication bypass vulnerabilities in its API. An unauthenticated remote actor can circumvent existing authentication controls, potentially gaining administrative privileges and achieving complete compromise of the orchestrator host. The vul...

CVE-2026-76673 Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...

CVE-2026-76670

CVE-2026-76670 affects the API of HPE Networking EdgeConnect SD-WAN Orchestrator . The vulnerability is an authorization bypass that permits a remote, low-privileged authenticated user to escalate to administrative privileges , resulting in complete system compromise . The CVSS 3.1 score is 9.9 (...

EUVD-2026-79198

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint...

CVE-2026-76672 Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint...

CVE-2026-76672

CVE-2026-76672 affects the HPE Networking EdgeConnect SD-WAN Orchestrator . An authenticated remote attacker holding only read-only privileges can send a specially crafted request to the cache synchronization endpoint , leading to disclosure of sensitive third-party API tokens and credentials. Su...

CVE-2026-76670 Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise...

EUVD-2026-79196

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise...

CVE-2026-76669 Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise...

CVE-2026-76669

HPE Networking EdgeConnect SD-WAN Orchestrator contains a privilege escalation vulnerability in its API . A remote, low-privileged authenticated user can bypass authorization controls to escalate to administrative privileges, leading to complete system compromise . The vulnerability is rated CVSS...

CVE-2022-20818

CVE-2022-20818: Local Privilege Escalation via Partial File Read in Cisco SD-WAN The “config - load” feature from Viptela SSH shell uses “wget” to fetch remote “command” files over FTP. By hosting a malicious FTP server and replacing the local files created by wget with symlinks, an attacker can...

netgear-pwnagent

PwnAgent This is the PoC for CVE-2023-24749, aka PwnAgent, a One-Click WAN-side RCE in Netgear RAX Routers. You can trigget this exploit by visiting http://pwn.mahaloz.re. Explanation Please visit the blog which explains this here...

CVE-2026-20182

CVE-2026-20182 Cisco Catalyst SD-WAN Peering Authentication Bypass CVE-2026-20182 — Cisco Catalyst SD-WAN Peering Authentication Bypass Assessment tool for authorized testing of Cisco Catalyst SD-WAN Controller / Manager peering authentication bypass CVE-2026-20182. | ---|--- CVE| CVE-2026-20182...

CVE-2026-20127

🛡️ CVE-2026-20127 — Omisión de Autenticación en Cisco Catalyst SD-WAN 📌 Resumen CVE-2026-20127 es una vulnerabilidad crítica de omisión de autenticación que afecta a los componentes de Cisco Catalyst SD-WAN, incluidos los controladores y sistemas de gestión. Un atacante remoto no autenticado puede...

PT-2026-92431

🚨 CRITICAL: CVE-2026-76670 affects HPE Networking EdgeConnect SD-WAN Orchestrator. The vulnerability is an authorization/privilege escalation flaw in the API that could allow an attacker to gain elevated privileges on affected systems. ⚠️ Organizations running EdgeConnect should prioritize applyin...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: wan: farsync: Fixed use-after-free bugs caused by unfinished tasklets When the FarSync T-series card is detached, the fstcardinfo is deallocated in fstremoveone. However, the fsttxtask or fstinttask may still be running or...

CVE-2026-90693

A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2026-90693 D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow

A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible...