Priority MEDIUM 51
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01014 · Published 2026-09-15 · No fix listed CWE-120
Priority MEDIUM 50
Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00606 · Published 2026-09-15 · No fix listed CWE-287
Priority MEDIUM 44
Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct denial-of-service attacks.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.0046 · Published 2026-09-15 · No fix listed CWE-400
Priority MEDIUM 44
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.01451 · Published 2026-09-15 · No fix listed CWE-77
Priority MEDIUM 43
A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.0069 · Published 2026-09-15 · No fix listed CWE-120
Priority MEDIUM 43
A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00531 · Published 2026-09-15 · No fix listed CWE-200
Priority MEDIUM 43
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00498 · Published 2026-09-15 · No fix listed CWE-269
Priority MEDIUM 43
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00498 · Published 2026-09-15 · No fix listed CWE-269
Priority MEDIUM 41
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00625 · Published 2026-09-15 · No fix listed CWE-269
Priority MEDIUM 41
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00541 · Published 2026-09-15 · No fix listed CWE-269
Priority MEDIUM 40
A vulnerability exists in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-09-15 · No fix listed CWE-400
Priority MEDIUM 40
Buffer overflow vulnerabilities exist in the underlying operating system of EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to execute arbitrary code if certain preconditions outside of…
CVSS 3.1HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.00349 · Published 2026-09-15 · No fix listed CWE-121
Priority LOW 38
A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00668 · Published 2026-09-15 · No fix listed CWE-190
Priority LOW 38
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00456 · Published 2026-09-15 · No fix listed CWE-287
Priority LOW 38
Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain prec…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00589 · Published 2026-09-15 · No fix listed CWE-120
Priority LOW 37
A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's existing privilege le…
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00353 · Published 2026-09-15 · No fix listed CWE-284
Priority LOW 37
Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00359 · Published 2026-09-15 · No fix listed CWE-918
Priority LOW 36
A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.04534 · Published 2026-09-15 · No fix listed CWE-77
Priority LOW 36
A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01058 · Published 2026-09-15 · No fix listed CWE-78
Priority LOW 35
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to send specially crafted packets to the affected…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00479 · Published 2026-09-15 · No fix listed CWE-120
Priority LOW 35
Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00755 · Published 2026-09-15 · No fix listed CWE-120
Priority LOW 35
A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00852 · Published 2026-09-15 · No fix listed CWE-121
Priority LOW 35
Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00383 · Published 2026-09-15 · No fix listed CWE-287
Priority LOW 35
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00466 · Published 2026-09-15 · No fix listed CWE-269
Priority LOW 32
A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways.
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.00538 · Published 2026-09-15 · No fix listed CWE-269
Load more