5.9Media
CVE-2026-76701Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways
Descripción
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.
Debilidad (CWE):
CWE-306
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| arubanetworks | edgeconnect sd-wan orchestrator | 9.4.0 – < 9.4.11 | |
| Hewlett Packard Enterprise (HPE) | EdgeConnect SD-WAN Gateways | 9.7.0.0 – ≤ 9.7.0.0, 9.6.0.0 – ≤ 9.6.3.1, 9.5.0.0 – ≤ 9.5.8.1, 9.4.0.0 – ≤ 9.4.8.2 | |
| hpe | edgeconnect operating system | 9.4.0.0 – < 9.4.9.0 |
Referencias y parches
Coincidencias CPE (NVD) (8)
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.4.0 < 9.4.11cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.5.0 < 9.5.9cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*≥ 9.6.0 < 9.6.4cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.4.0.0 < 9.4.9.0cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.5.0.0 < 9.5.9.0cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*≥ 9.6.0.0 < 9.6.4.0cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*