CVE-2026-76706

תיאור (מקור, אנגלית)

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.

מדדים

CVSS 3.1

5.3 (MEDIUM) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS — סבירות ניצול

0% (אחוזון 000) נכון ל-27/9/2026

CWE

CWE-200

מוצרים מושפעים

arubanetworks: edgeconnect sd-wan orchestrator; hpe: edgeconnect operating system

קישורים

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLoc‮… Vendor Advisory