---
id: CVE-2026-76676
title: >-
  Buffer overflow vulnerabilities exist in the underlying operating system of
  EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent
  attacker to execute arbitrary code if certain preconditions outside of the
  attacker's co…
summary: >-
  Buffer overflow vulnerabilities exist in the underlying operating system of
  EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent
  attacker to execute arbitrary code if certain preconditions outside of the
  attacker's co…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-121
vendor: Hewlett Packard Enterprise (HPE)
product: EdgeConnect SD-WAN Gateways
affected:
  - edgeconnect_sd-wan_gateways >= 9.7.0.0 <= 9.7.0.0
  - edgeconnect_sd-wan_gateways >= 9.6.0.0 <= 9.6.3.1
  - edgeconnect_sd-wan_gateways >= 9.5.0.0 <= 9.5.8.1
  - edgeconnect_sd-wan_gateways >= 9.4.0.0 <= 9.4.8.2
published: '2026-09-15'
updated: '2026-09-21'
sourceUpdated: '2026-09-21T20:17:29.920'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76676'
references:
  - url: >-
      https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US
    label: security-alert@hpe.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-21T19:58:36.796389Z'
epss: 0.00349
epssPercentile: 0.2577
ingestedAt: '2026-09-15T19:42:58.830Z'
---

## Overview

Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary code as a privileged user on the underlying operating system leading to complete system compromise.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.