CVE-2026-76697
A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Analyzed - security-alert@hpe.com
- Published
- 2026-09-15
- Last modified
- 2026-09-15
- Weaknesses
- CWE-200
Affected products
- Edgeconnect Sd-wan Orchestrator (Arubanetworks)
- Edgeconnect Sd-wan Gateways (Hewlett Packard Enterprise Hpe)
- Edgeconnect Operating System (Hpe)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US
