ES
Product
EdgeConnect SD-WAN Gateways
38
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 6High 18Medium 14Low 0
Watch
Add EdgeConnect SD-WAN Gateways to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76672 | 9.9 | Sep 15 | Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76670 | 9.9 | Sep 15 | Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76669 | 9.9 | Sep 15 | Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76674 | 9.8 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76673 | 9.8 | Sep 15 | Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76675 | 9.1 | Sep 15 | Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76678 | 8.8 | Sep 15 | Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76677 | 8.8 | Sep 15 | Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76676 | 8.8 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76679 | 8.6 | Sep 15 | Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76681 | 8.5 | Sep 15 | Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator API Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76680 | 8.5 | Sep 15 | Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76682 | 8.2 | Sep 15 | Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76685 | 8.1 | Sep 15 | Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76684 | 8.1 | Sep 15 | Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76683 | 8.1 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76688 | 7.5 | Sep 15 | Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76687 | 7.5 | Sep 15 | Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN Orchestrator Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76686 | 7.5 | Sep 15 | Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76691 | 7.2 | Sep 15 | Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API Endpoint Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76690 | 7.2 | Sep 15 | Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76689 | 7.2 | Sep 15 | Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76692 | 7.1 | Sep 15 | Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76693 | 7.0 | Sep 15 | Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76694 | 6.6 | Sep 15 | Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76698 | 6.5 | Sep 15 | Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76697 | 6.5 | Sep 15 | Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76696 | 6.5 | Sep 15 | Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76695 | 6.5 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76699 | 6.4 | Sep 15 | Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76701 | 5.9 | Sep 15 | Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76700 | 5.9 | Sep 15 | Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76702 | 5.8 | Sep 15 | Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76705 | 5.5 | Sep 15 | Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76704 | 5.5 | Sep 15 | Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76703 | 5.5 | Sep 15 | Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
| CVE-2026-76706 | 5.3 | Sep 15 | Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data Affected: 9.7.0 through 9.7.0; 9.6.0 through 9.6.3; 9.5.0 through 9.5.8; 9.4.0 through 9.4.10 |
| CVE-2026-76707 | 4.3 | Sep 15 | Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.7.0.0 through 9.7.0.0; 9.6.0.0 through 9.6.3.1; 9.5.0.0 through 9.5.8.1; 9.4.0.0 through 9.4.8.2 |
Showing 38