EUVD-2026-79209

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation...

EUVD-2026-79210

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading ...

CVE-2026-76682

CVE-2026-76682 affects HPE Networking EdgeConnect SD-WAN Gateways , specifically the network security monitoring component of its intrusion detection systems. The root cause is a limited buffer overflow that an unauthenticated remote attacker can exploit over the network. Successful exploitation ...

CVE-2026-76681

CVE-2026-76681 is an authenticated information disclosure vulnerability in the API of HPE Networking EdgeConnect SD-WAN Orchestrator . A remote attacker with low privileges can access sensitive information beyond the scope of their authorized access level. Successful exploitation could yield data...

EUVD-2026-79207

A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's existing privilege level. Successful exploitation could allow an attacker to retrieve information...

CVE-2026-76680

CVE-2026-76680 affects the API of EdgeConnect SD-WAN Orchestrator (HPE). The vulnerability is an authenticated Server-Side Request Forgery (SSRF) that allows a remote attacker with low privileges to forge requests to the internal structure of the Orchestrator host. A successful exploit enables en...

EUVD-2026-79206

Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery SSRF attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WA...

CVE-2026-76679

Multiple denial-of-service vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways allow an unauthenticated adjacent attacker to crash the system. Successful exploitation prevents the gateway from rebooting without manual intervention , disrupting network operations. The CVSS 3.1 score is 8...

EUVD-2026-79205

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network...

EUVD-2026-79204

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on th...

CVE-2026-76678

HPE Networking EdgeConnect SD-WAN Gateways are affected by an authenticated command injection vulnerability in the API endpoint . A low-privilege, authenticated remote attacker can exploit this to escalate privileges and execute arbitrary system commands with root privileges on the underlying ope...

CVE-2026-76677

CVE-2026-76677 is an authorization bypass in the API of HPE Networking EdgeConnect SD-WAN Gateways that enables a remote, low-privileged authenticated user to escalate to administrative access on the web-management interface, potentially leading to complete system compromise . The vulnerability i...

CVE-2026-76676

HPE EdgeConnect SD-WAN Gateways are affected by buffer overflow vulnerabilities in the underlying operating system that can be exploited by an unauthenticated attacker on an adjacent network with low complexity and no user interaction. Successful exploitation allows execution of arbitrary code as...

EUVD-2026-79203

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise...

EUVD-2026-79202

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attack...

EUVD-2026-79201

A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise...

CVE-2026-76675

HPE EdgeConnect SD-WAN Gateways contain a command injection vulnerability in the device's command line interface . An authenticated remote attacker with high privileges can inject arbitrary commands into the CLI, executing them on the underlying operating system and achieving complete system comp...

CVE-2026-76674

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways , enabling an unauthenticated remote attacker to execute arbitrary code. Successful exploitation grants an attacker the ability to run arbitrary commands on the underlying OS, re...

EUVD-2026-79200

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying...

EUVD-2026-79199

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete...