CCB Alert on X: "Warning: Critical flaws in #HPE #Aruba EdgeConnect SD

X • September 16, 2026

CCB Alert on X: "Warning: Critical flaws in #HPE #Aruba EdgeConnect SD-WAN let unauthenticated attackers bypass Orchestrator auth and run code on Gateways. #CVE-2026-76673 CVSS(3.1): 9.8. #CVE-2026-76674 CVSS(3.1): 9.8. Read the advisory and #Patch #Patch #Patch"

EdgeConnect SD-WAN let unauthenticated attackers bypass Orchestrator auth and run code on Gateways.

-2026-76674 CVSS(3.1): 9.8. Read the advisory

EdgeConnect SD-WAN let unauthenticated attackers bypass Orchestrator auth and run code on Gateways.

-2026-76674 CVSS(3.1): 9.8. Read the advisory

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in HPE Aruba EdgeConnect SD-WAN Exposed HPE Aruba Networking EdgeConnect SD-WAN has critical vulnerabilities (CVE-2026-76673 and CVE-2026-76674) affecting versions 9.4.0 to 9.7.0. CVE-2026-76673 allows unauthenticated remote attackers to bypass authentication on the Orchestrator API, granting administrative access. CVE-2026-76674 enables attackers to execute arbitrary code on EdgeConnect Gateways due to buffer overflow vulnerabilities. Both vulnerabilities have a CVSS score of 9.8, indicating a high level of severity. Successful exploitation can lead to unauthorized access to sensitive data, manipulation of WAN policies, and disruption of network services. The Centre for Cybersecurity Belgium recommends immediate patching and enhanced monitoring for affected organizations. Both vulnerabilities were published on 2026-09-15. 2 sources 74

Extracted Entities

CCB Alert on X: "Warning: Critical flaws in #HPE #Aruba EdgeConnect SD

The full story

Extracted Entities

Companies (1)

CVEs (2)

CWE Weaknesses (1)

Platforms (1)