CVE-2026-76707

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - security-alert@hpe.com

Published

2026-09-15

Last modified

2026-09-16

Weaknesses

CWE-200

Affected products

• Edgeconnect Sd-wan Orchestrator (Arubanetworks)
• Edgeconnect Sd-wan Gateways (Hewlett Packard Enterprise Hpe)
• Edgeconnect Operating System (Hpe)

References

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US