Skip to content
ThreatCluster

Critical Vulnerabilities in HPE Aruba EdgeConnect SD-WAN Exposed

First seen 16 Sep 2026, 19:58 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 16, 2026 at 22:55 UTC
  • •Two critical vulnerabilities in HPE Aruba EdgeConnect SD-WAN with CVSS scores of 9.8.
  • •CVE-2026-76673 allows bypassing of authentication controls; CVE-2026-76674 enables arbitrary code execution.
  • •Immediate patching and increased monitoring are strongly recommended by cybersecurity authorities.

HPE Aruba Networking EdgeConnect SD-WAN has critical vulnerabilities (CVE-2026-76673 and CVE-2026-76674) affecting versions 9.4.0 to 9.7.0. CVE-2026-76673 allows unauthenticated remote attackers to bypass authentication on the Orchestrator API, granting administrative access. CVE-2026-76674 enables attackers to execute arbitrary code on EdgeConnect Gateways due to buffer overflow vulnerabilities. Both vulnerabilities have a CVSS score of 9.8, indicating a high level of severity. Successful exploitation can lead to unauthorized access to sensitive data, manipulation of WAN policies, and disruption of network services. The Centre for Cybersecurity Belgium recommends immediate patching and enhanced monitoring for affected organizations. Both vulnerabilities were published on 2026-09-15.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-15
CVE-2026-76673 and CVE-2026-76674 published
HPE disclosed critical vulnerabilities in EdgeConnect SD-WAN affecting versions 9.4.0 to 9.7.0.
Ccb.Belgium.Be
2026-09-16
CCB issues alert
The Centre for Cybersecurity Belgium warns organizations of the critical flaws and urges immediate action.
Ccb.Belgium.Be
2026-09-16
Social media alert issued
CCB alerts the public on X about the vulnerabilities, emphasizing the need to patch immediately.
X

More articles in this cluster (4)

Following this threat?

Track Aruba and CVE-2026-76673 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 4