# CVE-2026-76692: HPE EdgeConnect SD-WAN Gateway information disclosure and denial of service

Source: https://junglewise.ai/threats/cve-2026-76692-hpe-edgeconnect-sd-wan-gateway-information-disclosure-and-denial  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-15. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-76692 · Severity: high · CVSS 7.1 · Published 2026-09-15

HPE EdgeConnect is a SD-WAN gateway used to optimize and secure branch network traffic. An unauthenticated attacker on an adjacent network can trigger a crash or leak uninitialized memory from the device, disrupting network operations and potentially exposing sensitive data.

Technologies: [Hpe EdgeConnect SD-WAN Gateway](https://junglewise.ai/threats/technologies/edgeconnect-sd-wan-gateway). Vendors: [Hpe](https://junglewise.ai/threats/vendors/hpe).

## Quick answers

**Is CVE-2026-76692 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-76692 being exploited in the wild.

**How severe is CVE-2026-76692?** High severity, with a CVSS score of 7.1, published 15 September 2026.

**Which products and versions are affected?** Hpe EdgeConnect SD-WAN Gateway <UNKNOWN>.

**Is there a fix for CVE-2026-76692?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-76692 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-76692?** Check whether you run Hpe EdgeConnect SD-WAN Gateway at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability allows an unauthenticated, adjacent network attacker to obtain limited information from memory and cause denial of service in HPE EdgeConnect SD-WAN Gateways. The attack exploits an uninitialized memory disclosure or memory handling issue accessible without authentication, requiring only network adjacency. Successful exploitation results in either a system crash (DoS) or disclosure of uninitialized stack memory containing sensitive information. No patch information is currently known to be available.

## Affected products

- HPE EdgeConnect SD-WAN Gateway <UNKNOWN>

## Timeline

- 2026-09-15: disclosed

## References

- [https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US](https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US)

## Related threats

- [HPE EdgeConnect SD-WAN Gateway information disclosure via memory access](https://junglewise.ai/threats/cve-2026-76707-hpe-edgeconnect-sd-wan-gateway-information-disclosure-via-memory)
- [HPE EdgeConnect denial of service in operating system](https://junglewise.ai/threats/cve-2026-76702-hpe-edgeconnect-denial-of-service-in-operating-system)
- [HPE EdgeConnect SD-WAN Gateway buffer overflow in system service](https://junglewise.ai/threats/cve-2026-76699-hpe-edgeconnect-sd-wan-gateway-buffer-overflow-in-system-service)
- [HPE Networking EdgeConnect SD-WAN Gateway information disclosure in web management interface](https://junglewise.ai/threats/cve-2026-76697-hpe-networking-edgeconnect-sd-wan-gateway-information-disclosure)
- [HPE EdgeConnect SD-WAN Gateway denial of service](https://junglewise.ai/threats/cve-2026-76696-hpe-edgeconnect-sd-wan-gateway-denial-of-service)