Executive brief
HPE Networking EdgeConnect is a software-defined wide-area network (SD-WAN) gateway used by enterprises to optimize and secure multi-site network connectivity. A denial-of-service vulnerability allows an unauthenticated remote attacker to disrupt normal operation of the gateway, potentially causing network outages that impact business connectivity across multiple sites.
Technical details
The vulnerability is a denial-of-service flaw in HPE Networking EdgeConnect SD-WAN Gateways that can be exploited by an unauthenticated remote attacker without requiring user interaction or privileged access. The attack is network-reachable and does not require authentication, allowing an attacker to interrupt normal service operation. The vulnerability does not enable data theft or unauthorized access, but successful exploitation causes service unavailability. Patches or updates should be applied according to HPE's guidance.
Affected products
- HPE Networking EdgeConnect SD-WAN Gateways
Timeline
- 2026-09-15: disclosed