CVE-2026-76705: Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
Published Sep 15, 2026
·Updated
A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary commands on the underlying operating system.
Affected Software
1 affected component
HPE Networking EdgeConnect SD-WAN Gateways
Event History
Sep 15, 2026
CVE Published
via MITRE·07:24 PM
Data Sourced
via MITRE·07:24 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated to the gateway's API and have Admin privilege. The attack can be performed remotely and does not require user interaction.
2
What is the potential impact after successful exploitation?
A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system. This can affect system availability and integrity.