Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-76697

Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Default version status: affected

  • 9.7.0.0 to ≤ 9.7.0.0affected
  • 9.6.0.0 to ≤ 9.6.3.1affected
  • 9.5.0.0 to ≤ 9.5.8.1affected
  • 9.4.0.0 to ≤ 9.4.8.2affected

References