What is GHSA-w2h5-pgm6-hg28?

GHSA-w2h5-pgm6-hg28 is a security advisory published by GitHub Security Advisories with Critical severity. Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking...

Which CVE IDs does GHSA-w2h5-pgm6-hg28 cover?

GHSA-w2h5-pgm6-hg28 covers the following CVE IDs: CVE-2026-76674. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w2h5-pgm6-hg28?

GHSA-w2h5-pgm6-hg28 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-w2h5-pgm6-hg28CriticalCVSS 9.8

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking...

Vendor

GitHub Security Advisories

Published

September 15, 2026

Last Modified

September 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-76674 →

📋 Description

Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-76674
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US
https://github.com/advisories/GHSA-w2h5-pgm6-hg28