Quick answers
- Is CVE-2026-76696 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-76696 being exploited in the wild.
- How severe is CVE-2026-76696?
- Medium severity, with a CVSS score of 6.5, published 15 September 2026.
- Which products and versions are affected?
- Hpe EdgeConnect SD-WAN Gateway <UNKNOWN>.
- Is there a fix for CVE-2026-76696?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-76696 attacked?
- It is attacked from the adjacent network, in a network appliance.
- Am I affected by CVE-2026-76696?
- Check whether you run Hpe EdgeConnect SD-WAN Gateway at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This vulnerability allows an unauthenticated adjacent network attacker to trigger a denial of service condition in HPE EdgeConnect SD-WAN Gateways. The attack vector is adjacent-network, meaning the attacker must be on the same network segment as the affected device. Successful exploitation causes the system to crash and become unable to reboot without manual intervention, effectively disabling the device. No authentication is required to mount the attack. A patch is available from HPE.
Affected products
- HPE EdgeConnect SD-WAN Gateway <UNKNOWN>
Timeline
- 2026-09-15: disclosed