CVE-2026-76686

Last refreshed2026-10-12

Status: UPDATED | Advisory ID: CVE-2026-76686

Key Details

CVE	CVE-2026-76686
CVSS Score / Version	7.5 (High) / CVSS v3.1
Updated	2026-09-28
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products	arubanetworks edgeconnect_sd-wan_orchestrator, hpe edgeconnect_operating_system, and Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
Classified as	CWE-400 (Uncontrolled Resource Consumption)

Affected Products, Subsystems & Sectors

Vendor	Product	Affected Versions	Patch Status
arubanetworks	edgeconnect_sd-wan_orchestrator
hpe	edgeconnect_operating_system
Hewlett Packard Enterprise (HPE)	EdgeConnect SD-WAN Gateways

Vendor

Product

Affected Versions

Patch Status

arubanetworks

edgeconnect_sd-wan_orchestrator

hpe

edgeconnect_operating_system

Hewlett Packard Enterprise (HPE)

EdgeConnect SD-WAN Gateways

Subsystems	General OT
Sectors	Multiple

What to Know

A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an unauthenticated remote attacker to conduct a denial-of-service attack on the affected service. (NVD)

What to Do

Monitor arubanetworks, hpe, and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-76686
CVE	https://www.cve.org/CVERecord?id=CVE-2026-76686
Vendor advisory	https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-76686

CVE

https://www.cve.org/CVERecord?id=CVE-2026-76686

Vendor advisory