« Volver al listado

CVE-2026-76695

Estado: AnalizadaMedia (6.5)—

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the integrity and availability of the affected service.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Arubanetworks — Edgeconnect Sd-wan OrchestratorHPE — Edgeconnect Operating System

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-76695",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-76695",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-09-15T19:42:45.830889Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-alert@hpe.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "Hewlett Packard Enterprise (HPE)",
          "product": "EdgeConnect SD-WAN Gateways",
          "versions": [
            {
              "status": "affected",
              "version": "9.7.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0.0"
            },
            {
              "status": "affected",
              "version": "9.6.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.6.3.1"
            },
            {
              "status": "affected",
              "version": "9.5.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.5.8.1"
            },
            {
              "status": "affected",
              "version": "9.4.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.4.8.2"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-15T20:17:52.777",
  "references": [
    {
      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-120"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the integrity and availability of the affected service."
    }
  ],
  "lastModified": "2026-09-28T13:47:49.590",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E8BB761-5AEC-4765-A95C-AEF7C98A0E29",
              "versionEndExcluding": "9.4.11",
              "versionStartIncluding": "9.4.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E5BDE58-9DC1-474B-85DD-829711373690",
              "versionEndExcluding": "9.5.9",
              "versionStartIncluding": "9.5.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9712F8F6-023D-473C-AA93-DBF5478C321C",
              "versionEndExcluding": "9.6.4",
              "versionStartIncluding": "9.6.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAA50358-9871-4DDB-82FC-7F40A24D010A"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54E3B50C-9E5F-4723-A800-F56C78CC7B6A",
              "versionEndExcluding": "9.4.9.0",
              "versionStartIncluding": "9.4.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB1D2C6C-BDC6-4980-8285-5ED3FD35E9A1",
              "versionEndExcluding": "9.5.9.0",
              "versionStartIncluding": "9.5.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2F43C93-AE07-4853-BCF7-4F8EEC6AA3B3",
              "versionEndExcluding": "9.6.4.0",
              "versionStartIncluding": "9.6.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED7727E9-BDC6-46A0-99D0-C8CA4613CF95"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}