CVE-2026-76706
EUVD-2026-7923215.09.2026, 20:17
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.4.0 ≤ 𝑥 < 9.4.11 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.5.0 ≤ 𝑥 < 9.5.9 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.6.0 ≤ 𝑥 < 9.6.4 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.7.0 |
| hpe | edgeconnect_operating_system | 9.4.0.0 ≤ 𝑥 < 9.4.9.0 |
| hpe | edgeconnect_operating_system | 9.5.0.0 ≤ 𝑥 < 9.5.9.0 |
| hpe | edgeconnect_operating_system | 9.6.0.0 ≤ 𝑥 < 9.6.4.0 |
| hpe | edgeconnect_operating_system | 9.7.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration