---
id: CVE-2026-76695
title: >-
  Buffer overflow vulnerabilities exist in the underlying operating system of
  HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated
  remote attacker to send specially crafted packets to the affected service
summary: >-
  Buffer overflow vulnerabilities exist in the underlying operating system of
  HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated
  remote attacker to send specially crafted packets to the affected service.
  Success…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L'
cwe:
  - CWE-120
vendor: Hewlett Packard Enterprise (HPE)
product: EdgeConnect SD-WAN Gateways
affected:
  - edgeconnect_sd-wan_gateways >= 9.7.0.0 <= 9.7.0.0
  - edgeconnect_sd-wan_gateways >= 9.6.0.0 <= 9.6.3.1
  - edgeconnect_sd-wan_gateways >= 9.5.0.0 <= 9.5.8.1
  - edgeconnect_sd-wan_gateways >= 9.4.0.0 <= 9.4.8.2
published: '2026-09-15'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T19:20:52.817'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-76695'
references:
  - url: >-
      https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US
    label: security-alert@hpe.com
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-09-15T19:42:45.830889Z'
ingestedAt: '2026-09-15T19:42:58.823Z'
epss: 0.00372
epssPercentile: 0.30954
---

## Overview

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the integrity and availability of the affected service.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.