Arubanetworks Edgeconnect Sd-Wan Orchestrator
67 CVEs affecting Arubanetworks Edgeconnect Sd-Wan Orchestrator. Latest disclosed: 2026-09-15. Critical: 7, High: 31.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-76672 | Critical | 9.9 | 2026-09-15 | A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with r… |
CVE-2026-76670 | Critical | 9.9 | 2026-09-15 | Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privi… |
CVE-2026-76669 | Critical | 9.9 | 2026-09-15 | Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privi… |
CVE-2026-76674 | Critical | 9.8 | 2026-09-15 | Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remo… |
CVE-2026-76673 | Critical | 9.8 | 2026-09-15 | Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent e… |
CVE-2025-37184 | Critical | 9.8 | 2026-01-14 | A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Succe… |
CVE-2026-76675 | Critical | 9.1 | 2026-09-15 | A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated rem… |
CVE-2026-76678 | High | 8.8 | 2026-09-15 | A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privile… |
CVE-2026-76677 | High | 8.8 | 2026-09-15 | A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticate… |
CVE-2026-76676 | High | 8.8 | 2026-09-15 | Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker t… |
CVE-2026-76679 | High | 8.6 | 2026-09-15 | Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks. Successful… |
CVE-2026-76681 | High | 8.5 | 2026-09-15 | A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information… |
CVE-2026-76680 | High | 8.5 | 2026-09-15 | Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request fo… |
CVE-2026-76682 | High | 8.2 | 2026-09-15 | A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited… |
CVE-2026-76685 | High | 8.1 | 2026-09-15 | A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenti… |
CVE-2026-76684 | High | 8.1 | 2026-09-15 | Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor… |
CVE-2026-76683 | High | 8.1 | 2026-09-15 | Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to… |
CVE-2024-41914 | High | 8.1 | 2024-07-24 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross… |
CVE-2023-37424 | High | 8.1 | 2023-08-22 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary comman… |
CVE-2023-37423 | High | 8.1 | 2023-08-22 | Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross… |