What is CVE-2026-76695?

CVE-2026-76695 is a medium-severity vulnerability in Hewlett Packard Enterprise (HPE) Edgeconnect Sd-Wan Gateways, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.5/10. Published 2026-09-15.

How severe is CVE-2026-76695?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Buffer overflow in Hewlett Packard Enterprise (HPE) Edgeconnect Sd-Wan Gateways

CVE-2026-76695

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected service. Successful exploitation could allow an attacker to affect the integrity and availability of the affected service.

Vulnerability class: Buffer Overflow

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L.

Affected products

Hewlett Packard Enterprise (Hpe) Edgeconnect Sd-wan Gateways

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

security-alert@hpe.com

Frequently asked questions

What is CVE-2026-76695?: CVE-2026-76695 is a medium-severity vulnerability in Hewlett Packard Enterprise (HPE) Edgeconnect Sd-Wan Gateways, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.5/10. Published 2026-09-15.
How severe is CVE-2026-76695?: Medium severity. CVSS v3 base score is 6.5 out of 10.