Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2026-76701

Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

Description

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Default version status: affected

  • 9.7.0.0 to ≤ 9.7.0.0affected
  • 9.6.0.0 to ≤ 9.6.3.1affected
  • 9.5.0.0 to ≤ 9.5.8.1affected
  • 9.4.0.0 to ≤ 9.4.8.2affected

References