5.9Medium

CVE-2026-76700Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways Published: (1 month ago)

Description

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an attacker to interrupt the normal operation of the affected service.

Weakness (CWE): CWE-400

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
arubanetworks edgeconnect sd-wan orchestrator 9.4.0 – < 9.4.11
Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways 9.7.0.0 – ≤ 9.7.0.0, 9.6.0.0 – ≤ 9.6.3.1, 9.5.0.0 – ≤ 9.5.8.1, 9.4.0.0 – ≤ 9.4.8.2
hpe edgeconnect operating system 9.4.0.0 – < 9.4.9.0

References and patches

CPE matches (NVD) (8)

  • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:* ≥ 9.4.0 < 9.4.11
  • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:* ≥ 9.5.0 < 9.5.9
  • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:* ≥ 9.6.0 < 9.6.4
  • cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*
  • cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:* ≥ 9.4.0.0 < 9.4.9.0
  • cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:* ≥ 9.5.0.0 < 9.5.9.0
  • cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:* ≥ 9.6.0.0 < 9.6.4.0
  • cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*