← Back

CVE-2026-76688

nvd nist
Published: Sep 15, 2026Modified: Sep 25, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.6 / Impact: 5.9
Source: security-alert@hpe.com (Secondary)

Description

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

Affected (8)

Arubanetworks
1 product
Edgeconnect Sd Wan Orchestrator
Hpe
1 product
Edgeconnect Operating System
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Arubanetworks
Edgeconnect Sd Wan Orchestrator
9.4.0 ≤ version < 9.4.11
Edgeconnect Sd Wan Orchestrator
9.5.0 ≤ version < 9.5.9
Edgeconnect Sd Wan Orchestrator
9.6.0 ≤ version < 9.6.4
Edgeconnect Sd Wan Orchestrator
Version 9.7.0
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Hpe
Edgeconnect Operating System
9.4.0.0 ≤ version < 9.4.9.0
Edgeconnect Operating System
9.5.0.0 ≤ version < 9.5.9.0
Edgeconnect Operating System
9.6.0.0 ≤ version < 9.6.4.0
Edgeconnect Operating System
Version 9.7.0.0

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (1)

Source: security-alert@hpe.com
Vendor Advisory

Timeline

No history available yet.