← All Advisories

CVE-2026-76683

Last refreshed2026-10-12

Status: UPDATED  |  Advisory ID: CVE-2026-76683

Key Details

CVECVE-2026-76683
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-09-28
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks edgeconnect_sd-wan_orchestrator, hpe edgeconnect_operating_system, and Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
Classified as
CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksedgeconnect_sd-wan_orchestrator
hpeedgeconnect_operating_system
Hewlett Packard Enterprise (HPE)EdgeConnect SD-WAN Gateways
SubsystemsGeneral OT
SectorsMultiple

What to Know

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise. (NVD)

What to Do

Monitor arubanetworks, hpe, and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-76683
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-76683
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE