CVE-2026-76683Disclosure(arubanetworks / edgeconnect_operating_system)

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

arubanetworks CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

Weakness type (CWE)

CWE-120

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

edgeconnect_operating_system
edgeconnect_sd-wan_orchestrator

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

arubanetworks hpe

Products

edgeconnect_operating_systemedgeconnect_sd-wan_orchestrator

2 versions affected across 2 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Full discourse1 post

Nishanth@Nishanth_KJ46d
Disclosure
CVE-2026-76683 details an API endpoint vulnerability in EdgeConnect SD-WAN Gateways. This allows running arbitrary commands remotely from a buffer overflow. #Security #CVE #EdgeConnect #InfoSec
Post summary
The text discloses CVE-2026-76683 as an API endpoint buffer overflow in EdgeConnect SD-WAN Gateways allowing remote arbitrary command execution, providing technical vulnerability details but no PoC, exploit tool, or patch information.
0000045
66 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	arubanetworks	edgeconnect_sd-wan_orchestrator	-	-	-
App	arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0	-	-
OS	hpe	edgeconnect_operating_system	-	-	-
OS	hpe	edgeconnect_operating_system	9.7.0.0	-	-

Explore more

Back to dashboard arubanetworks CVEs hpe CVEs edgeconnect_operating_system vulnerabilities