CVE-2026-76684

תיאור (מקור, אנגלית)

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

מדדים

CVSS 3.1

8.1 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-27/9/2026

CWE

CWE-287

מוצרים מושפעים

arubanetworks: edgeconnect sd-wan orchestrator; hpe: edgeconnect operating system

קישורים

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLoc‮… Vendor Advisory