VendorsAruba Networksedgeconnect_sd-wan_orchestratorall versions
Vulnerabilities

Aruba Networks EdgeConnect SD-WAN Orchestrator

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

67CVEs
CVE-2026-76672
Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator
Published 2026-09-15 · Analyzed
9.9EPSS 0.005
CVE-2026-76669
Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
Published 2026-09-15 · Analyzed
9.9EPSS 0.005
CVE-2026-76670
Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
Published 2026-09-15 · Analyzed
9.9EPSS 0.005
CVE-2026-76674
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
9.8EPSS 0.010
CVE-2025-37184
Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention
Published 2026-01-14 · Modified
9.8EPSS 0.006
CVE-2026-76673
Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator
Published 2026-09-15 · Analyzed
9.8EPSS 0.006
CVE-2026-76675
Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
9.1EPSS 0.015
CVE-2024-41914
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.
Published 2024-07-24 · Modified
9.0EPSS 0.005
CVE-2024-41136
Authenticated Command Injection in HPE Aruba Networking EdgeConnect SD-WAN Command Line Interface
Published 2024-07-24 · Modified
8.8EPSS 0.009
CVE-2024-22443
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Published 2024-07-24 · Modified
8.8EPSS 0.008
CVE-2026-76678
Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
8.8EPSS 0.006
CVE-2026-76677
Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
8.8EPSS 0.005
CVE-2026-76676
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
8.8EPSS 0.003
CVE-2026-76679
Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
8.6EPSS 0.005
CVE-2026-76680
Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator
Published 2026-09-15 · Analyzed
8.5EPSS 0.004
CVE-2026-76681
Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator API
Published 2026-09-15 · Analyzed
8.5EPSS 0.004
CVE-2026-76682
Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
8.2EPSS 0.007
CVE-2023-37434
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.010
CVE-2023-37424
Unauthenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.009
CVE-2023-37429
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37430
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37431
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37432
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2023-37433
Authenticated SQL Injection Vulnerabilities in EdgeConnect SD-WAN Orchestrator Web-based Management Interface
Published 2023-08-22 · Modified
8.1EPSS 0.008
CVE-2026-76685
Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
8.1EPSS 0.007
CVE-2026-76683
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
8.1EPSS 0.006
CVE-2023-37421
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Published 2023-08-22 · Modified
8.1EPSS 0.005
CVE-2023-37422
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Published 2023-08-22 · Modified
8.1EPSS 0.005
CVE-2023-37423
Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface
Published 2023-08-22 · Modified
8.1EPSS 0.005
CVE-2026-76684
Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API
Published 2026-09-15 · Analyzed
8.1EPSS 0.005
CVE-2023-37425
Unauthenticated Stored Cross-Site Scripting Vulnerability (XSS) in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2023-08-22 · Modified
8.0EPSS 0.005
CVE-2026-76686
Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
7.5EPSS 0.006
CVE-2023-37426
Shared SSH Static Host Keys in EdgeConnect SD-WAN Orchestrator
Published 2023-08-22 · Modified
7.5EPSS 0.005
CVE-2026-76687
Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN Orchestrator
Published 2026-09-15 · Analyzed
7.5EPSS 0.005
CVE-2026-76688
Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator
Published 2026-09-15 · Analyzed
7.5EPSS 0.004
CVE-2023-37427
Authenticated Remote Code Execution in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2023-08-22 · Modified
7.2EPSS 0.013
CVE-2023-37428
Authenticated Remote Code Execution via Path Traversal in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface
Published 2023-08-22 · Modified
7.2EPSS 0.011
CVE-2026-76690
Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
7.2EPSS 0.011
CVE-2026-76689
Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
Published 2026-09-15 · Analyzed
7.2EPSS 0.009
CVE-2026-76691
Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API Endpoint
Published 2026-09-15 · Analyzed
7.2EPSS 0.008
1 / 2Next →