VULNERABILITY INTELLIGENCE
CVE-2026-76676
CVSS score8.8 HIGH
EPSS probability0.35%
CISA KEVNot currently listed
Published2026-09-15
Last modified2026-09-28
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-121
Primary references
- security-alert@hpe.com — Vendor Advisory