← Back

CVE-2026-76701

nvd nist
Published: Sep 15, 2026Modified: Sep 28, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: security-alert@hpe.com (Secondary)

Description

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.

Affected (8)

Arubanetworks
1 product
Edgeconnect Sd Wan Orchestrator
Hpe
1 product
Edgeconnect Operating System
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Arubanetworks
Edgeconnect Sd Wan Orchestrator
9.4.0 ≤ version < 9.4.11
Edgeconnect Sd Wan Orchestrator
9.5.0 ≤ version < 9.5.9
Edgeconnect Sd Wan Orchestrator
9.6.0 ≤ version < 9.6.4
Edgeconnect Sd Wan Orchestrator
Version 9.7.0
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Hpe
Edgeconnect Operating System
9.4.0.0 ≤ version < 9.4.9.0
Edgeconnect Operating System
9.5.0.0 ≤ version < 9.5.9.0
Edgeconnect Operating System
9.6.0.0 ≤ version < 9.6.4.0
Edgeconnect Operating System
Version 9.7.0.0

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

Source: security-alert@hpe.com
Vendor Advisory

Timeline

No history available yet.