CVE-2026-76697
EUVD-2026-7922315.09.2026, 20:17
A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.4.0 ≤ 𝑥 < 9.4.11 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.5.0 ≤ 𝑥 < 9.5.9 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.6.0 ≤ 𝑥 < 9.6.4 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.7.0 |
| hpe | edgeconnect_operating_system | 9.4.0.0 ≤ 𝑥 < 9.4.9.0 |
| hpe | edgeconnect_operating_system | 9.5.0.0 ≤ 𝑥 < 9.5.9.0 |
| hpe | edgeconnect_operating_system | 9.6.0.0 ≤ 𝑥 < 9.6.4.0 |
| hpe | edgeconnect_operating_system | 9.7.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration