ES
Product
Edgeconnect Sd-wan Orchestrator
71
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 37Medium 26Low 0
Watch
Add Edgeconnect Sd-wan Orchestrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-76672 | 9.9 | Sep 15 | Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76670 | 9.9 | Sep 15 | Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76669 | 9.9 | Sep 15 | Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76674 | 9.8 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76673 | 9.8 | Sep 15 | Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2025-37184 | 9.8 | Jan 14 | Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention Affected: 9.2.0 through 9.2.10; 9.3.0 before 9.3.6; 9.4.0 before 9.4.3; 9.5.0 before 9.5.6; 9.6.0 |
| CVE-2026-76675 | 9.1 | Sep 15 | Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2024-41914 | 9.0 | Jul 24 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting… Affected: 9.1.0 through 9.1.9; 9.2.0 through 9.2.9; 9.3.0 through 9.3.2; 9.4.0 through 9.4.1 |
| CVE-2026-76678 | 8.8 | Sep 15 | Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76677 | 8.8 | Sep 15 | Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76676 | 8.8 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2024-41136 | 8.8 | Jul 24 | Authenticated Command Injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface Affected: 9.1.0 through 9.1.11; 9.2.0 through 9.2.9; 8.0.0; 9.0.0; 9.3.0 |
| CVE-2024-22443 | 8.8 | Jul 24 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution… Affected: 9.1.0 before 9.1.10; 9.2.0 before 9.2.10; 9.3.0 before 9.3.3; 9.4.0 before 9.4.2 |
| CVE-2026-76679 | 8.6 | Sep 15 | Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76681 | 8.5 | Sep 15 | Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator API Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76680 | 8.5 | Sep 15 | Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76682 | 8.2 | Sep 15 | Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76685 | 8.1 | Sep 15 | Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76684 | 8.1 | Sep 15 | Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76683 | 8.1 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2023-37434 | 8.1 | Aug 22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37433 | 8.1 | Aug 22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37432 | 8.1 | Aug 22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37431 | 8.1 | Aug 22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37430 | 8.1 | Aug 22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37429 | 8.1 | Aug 22 | Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37424 | 8.1 | Aug 22 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2026-76688 | 7.5 | Sep 15 | Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76687 | 7.5 | Sep 15 | Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN Orchestrator Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76686 | 7.5 | Sep 15 | Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2023-37426 | 7.5 | Aug 22 | EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared static SSH host keys for all installations Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2026-76691 | 7.2 | Sep 15 | Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API Endpoint Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76690 | 7.2 | Sep 15 | Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76689 | 7.2 | Sep 15 | Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2025-37181 | 7.2 | Jan 14 | Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.2.0 through 9.2.10; 9.3.0 through 9.3.6; 9.4.0 through 9.4.4; 9.5.0 before 9.5.6; 9.6.0 |
| CVE-2025-37183 | 7.2 | Jan 14 | Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.2.0 through 9.2.10; 9.3.0 through 9.3.6; 9.4.0 through 9.4.4; 9.5.0 before 9.5.6; 9.6.0 |
| CVE-2025-37182 | 7.2 | Jan 14 | Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.2.0 through 9.2.10; 9.3.0 through 9.3.6; 9.4.0 through 9.4.4; 9.5.0 before 9.5.6; 9.6.0 |
| CVE-2024-41135 | 7.2 | Jul 24 | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface Affected: 8.0.0 before 8.0.1; 9.3.0 through 9.3.3.0; 9.2.0 through 9.2.9.0; 9.1.0 through 9.1.11.0; 9.0.0 before 9.1.0 |
| CVE-2024-41134 | 7.2 | Jul 24 | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface Affected: 9.3.0 through 9.3.3.0; 9.2.0 through 9.2.9.0; 9.1.0 through 9.1.11.0; 9.0.0 before 9.1.0; 8.0.0 before 8.0.1 |
| CVE-2024-41133 | 7.2 | Jul 24 | Authenticated Remote Code Execution in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface Affected: 9.3.0 through 9.3.3.0; 9.2.0 through 9.2.9.0; 9.1.0 through 9.1.11.0; 9.0.0 before 9.1.0; 8.0.0 before 8.0.1 |
| CVE-2024-33519 | 7.2 | Jul 24 | Authenticated Server-Side prototype pollution Leading to Information Disclosure Affected: 9.3.0 through 9.3.3.0; 9.2.0 through 9.2.9.0; 9.1.0 through 9.1.11.0; 9.0.0 before 9.1.0; 8.0.0 before 8.0.1 |
| CVE-2023-37428 | 7.2 | Aug 22 | A vulnerability in the EdgeConnect SD-WAN Orchestrator web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2023-37427 | 7.2 | Aug 22 | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the… Affected: 9.0.0 through 9.0.5; 9.1.0 through 9.1.7; 9.2.0 through 9.2.5; 9.3.0 |
| CVE-2026-76692 | 7.1 | Sep 15 | Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76693 | 7.0 | Sep 15 | Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76694 | 6.6 | Sep 15 | Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76698 | 6.5 | Sep 15 | Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76697 | 6.5 | Sep 15 | Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76696 | 6.5 | Sep 15 | Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |
| CVE-2026-76695 | 6.5 | Sep 15 | Unauthenticated Buffer Overflow Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0 |