Description
A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful exploitation could result in a buffer overflow, potentially leading to remote code execution or denial-of-service.
Published: 2026-09-15
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution or Denial of Service
Action: Apply Patch
AI Analysis

Impact

The vulnerability is an integer overflow in the proxy packet processing logic of the EdgeConnect SD‑WAN gateway. When the gateway receives malformed or truncated input, the overflow leads to a buffer overflow condition. Successful exploitation allows a remote attacker to execute arbitrary code or crash the device, resulting in loss of confidentiality, integrity, or availability.

Affected Systems

Hewlett Packard Enterprise EdgeConnect SD‑WAN Gateways are affected. Version information is not specified in the advisory.

Risk and Exploitability

The CVSS score of 8.1 indicates a high likelihood of significant impact. No EPSS score is available, so the current exploitation probability is unknown, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is an unauthenticated remote attacker sending specially crafted packets to the gateway over the network, a scenario that is realistic for transit or edge devices exposed to untrusted traffic.

Generated by OpenCVE AI on September 15, 2026 at 23:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the EdgeConnect gateway to the latest firmware or security patch released by HPE that fixes the integer overflow issue.
  • Restrict inbound traffic to the gateway by implementing firewall rules or placing it on a dedicated VLAN so that only trusted networks can reach it.
  • Enable logging and monitor the gateway for repeated instances of malformed packets or abnormal crashes to detect potential exploitation attempts.

Generated by OpenCVE AI on September 15, 2026 at 23:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 15 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-120
CWE-680

Tue, 15 Sep 2026 19:45:00 +0000

Type Values Removed Values Added
Description A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful exploitation could result in a buffer overflow, potentially leading to remote code execution or denial-of-service.
Title Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
References
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: hpe

Published:

Updated: 2026-09-15T19:23:44.663Z

Reserved: 2026-08-19T16:11:34.860Z

Link: CVE-2026-76685

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-15T20:17:50.453

Modified: 2026-09-16T19:20:52.817

Link: CVE-2026-76685

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-15T23:30:07Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

  • CWE-680

    Integer Overflow to Buffer Overflow