{"id":"CVE-2026-76695","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-76695","generatedAt":"2026-10-28T01:52:21.536Z","title":"Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service.","description":"Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the integrity and availability of the affected service.","published":"2026-09-15T20:17:53.000Z","lastModified":"2026-09-28T13:47:50.000Z","status":"Analyzed","sourceIdentifier":"security-alert@hpe.com","cvss":{"version":"3.1","score":6.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"},"cwe":["CWE-120"],"affected":["arubanetworks/edgeconnect sd-wan orchestrator","hpe/edgeconnect operating system"],"epss":{"score":0.00479,"percentile":0.41076,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.48%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US","tags":["Vendor Advisory"],"source":"security-alert@hpe.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-76695","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}