4.3Medium
CVE-2026-76707Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
Description
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.
Weakness (CWE):
CWE-200
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| arubanetworks | edgeconnect sd-wan orchestrator | 9.4.0 – < 9.4.11 | |
| Hewlett Packard Enterprise (HPE) | EdgeConnect SD-WAN Gateways | 9.7.0.0 – ≤ 9.7.0.0, 9.6.0.0 – ≤ 9.6.3.1, 9.5.0.0 – ≤ 9.5.8.1, 9.4.0.0 – ≤ 9.4.8.2 | |
| hpe | edgeconnect operating system | 9.4.0.0 – < 9.4.9.0 |
References and patches
CPE matches (NVD) (8)
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.4.0 < 9.4.11cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.5.0 < 9.5.9cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.6.0 < 9.6.4cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.4.0.0 < 9.4.9.0cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.5.0.0 < 9.5.9.0cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.6.0.0 < 9.6.4.0cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*