CVE-2026-76679

HighCVSS 8.6/10Last modified Sep 28, 2026

Description

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
Hewlett Packard Enterprise (HPE)	EdgeConnect SD-WAN Gateways	>= 9.7.0.0, <= 9.7.0.0; >= 9.6.0.0, <= 9.6.3.1; >= 9.5.0.0, <= 9.5.8.1; >= 9.4.0.0, <= 9.4.8.2

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_USVendor Advisory

Timeline

Published: Sep 15, 2026
Last modified: Sep 28, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-76687.3A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib CVE-2026-766808.5Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct ser CVE-2026-766818.5A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sen CVE-2026-766828.2A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker t CVE-2026-766838.1Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated CVE-2026-766848.1Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenti CVE-2026-766858.1A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated i CVE-2026-766867.5A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow CVE-2026-766877.5A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attac CVE-2026-766887.5Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow a CVE-2026-766897.2A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An aut CVE-2026-76695.6A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/h