CVE-2026-76706
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.
- Score
- CVSS 3.1 5.3 Medium
- Status
- Analyzed - security-alert@hpe.com
- Published
- 2026-09-15
- Last modified
- 2026-09-15
- Weaknesses
- CWE-200
Affected products
- Edgeconnect Sd-wan Orchestrator (Arubanetworks)
- Edgeconnect Sd-wan Gateways (Hewlett Packard Enterprise Hpe)
- Edgeconnect Operating System (Hpe)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US
