CVE-2026-76682

Last refreshed2026-10-12

Status: UPDATED | Advisory ID: CVE-2026-76682

Key Details

CVE	CVE-2026-76682
CVSS Score / Version	8.2 (High) / CVSS v3.1
Updated	2026-09-28
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is none; availability impact is high.
Affected products	arubanetworks edgeconnect_sd-wan_orchestrator, hpe edgeconnect_operating_system, and Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
Classified as	CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
arubanetworks	edgeconnect_sd-wan_orchestrator
hpe	edgeconnect_operating_system
Hewlett Packard Enterprise (HPE)	EdgeConnect SD-WAN Gateways

Vendor

Product

Affected Versions

Patch Status

arubanetworks

edgeconnect_sd-wan_orchestrator

hpe

edgeconnect_operating_system

Hewlett Packard Enterprise (HPE)

EdgeConnect SD-WAN Gateways

Subsystems	General OT
Sectors	Multiple

What to Know

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on the system. (NVD)

What to Do

Monitor arubanetworks, hpe, and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-76682
CVE	https://www.cve.org/CVERecord?id=CVE-2026-76682
Vendor advisory	https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-76682

CVE

https://www.cve.org/CVERecord?id=CVE-2026-76682

Vendor advisory