Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-76706

Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Default version status: affected

  • 9.7.0 to ≤ 9.7.0affected
  • 9.6.0 to ≤ 9.6.3affected
  • 9.5.0 to ≤ 9.5.8affected
  • 9.4.0 to ≤ 9.4.10affected

References