NetSight
medium5.9

CVE-2026-76701

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive informatio…

Impact

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.

Affected products

VendorProductAffected versions
ArubanetworksEdgeconnect Sd-Wan Orchestrator
from 9.4.0 before 9.4.11
from 9.5.0 before 9.5.9
from 9.6.0 before 9.6.4
Version 9.7.0
HpeEdgeconnect Operating System
from 9.4.0.0 before 9.4.9.0
from 9.5.0.0 before 9.5.9.0
from 9.6.0.0 before 9.6.4.0
Version 9.7.0.0

Weakness classification

References