← All Advisories

CVE-2026-76692

Last refreshed2026-10-12

Status: UPDATED  |  Advisory ID: CVE-2026-76692

Key Details

CVECVE-2026-76692
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-09-28
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS Prose
attack vector is adjacent; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is none; availability impact is high.
Affected products
arubanetworks edgeconnect_sd-wan_orchestrator, hpe edgeconnect_operating_system, and Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
Classified as
CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksedgeconnect_sd-wan_orchestrator
hpeedgeconnect_operating_system
Hewlett Packard Enterprise (HPE)EdgeConnect SD-WAN Gateways
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory. (NVD)

What to Do

Monitor arubanetworks, hpe, and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-76692
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-76692
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE