EdgeConnect SD-WAN Orchestrator

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 16, 2026
Last mentionedSep 16, 2026

Timeline

2 articles · newest first

HPE security advisory (AV26-928)

Canada's Cyber Centre relayed an HPE advisory covering multiple vulnerabilities in EdgeConnect SD-WAN Gateways and Orchestrator, urging prompt updates.

Canadian Centre for Cyber SecuritySep 16, 18:35 UTC · Sep 16, 2026Advisory1 · 1 read

Critical HPE Vulnerabilities Allow Remote Attackers to Achieve Complete System Compromise

HPE patched critical EdgeConnect SD-WAN flaws, including CVSS 9.8 unauthenticated API bypass and gateway RCE, enabling full system compromise.

Cyber Security NewsSep 16, 13:14 UTC · Sep 16, 2026VulnerabilityCVE-2026-76669 CVE-2026-76670 CVE-2026-76672+22

Related CVEs

by mentions

CVE-2026-766729.9
Authenticated Secret Disclosure in HPE SD-WAN Orchestrator Cache Sync Endpoint
published Sep 15, 2026HPE SD-WAN Orchestrator
CVE-2026-766709.9
Authenticated Privilege Escalation in HPE EdgeConnect SD-WAN Orchestrator API
published Sep 15, 2026Hewlett Packard Enterprise (HPE) HPE Networking EdgeConnect SD-WAN Orchestrator
CVE-2026-766699.9
Authenticated Privilege Escalation in HPE EdgeConnect SD-WAN Orchestrator API
published Sep 15, 2026HPE (Hewlett Packard Enterprise) HPE Networking EdgeConnect SD-WAN Orchestrator
CVE-2026-766749.8
Unauthenticated Buffer Overflow RCE in HPE EdgeConnect SD-WAN Gateways
published Sep 15, 2026Hewlett Packard Enterprise (HPE) HPE Networking EdgeConnect SD-WAN Gateway (EdgeConnect OS / ECOS)
CVE-2026-766739.8
Unauthenticated Auth Bypass in HPE Aruba EdgeConnect SD-WAN Orchestrator API
published Sep 15, 2026Hewlett Packard Enterprise (HPE Aruba Networking) EdgeConnect SD-WAN Orchestrator

Appears with

HPEvendor · 2
Hewlett Packard Enterprisevendor · 2
EdgeConnect SD-WAN Gatewayproduct · 1
EdgeConnect SD-WAN Gatewaysproduct · 1
Canadian Centre for Cyber Securityorganization · 1
ECOSproduct · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 16, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.