A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.
References
| Link | Resource |
|---|---|
| https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
28 Sep 2026, 13:48
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Arubanetworks
Hpe Arubanetworks edgeconnect Sd-wan Orchestrator Hpe edgeconnect Operating System |
|
| References | () https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US - Vendor Advisory | |
| CPE | cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:* cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:* |
16 Sep 2026, 12:17
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-200 |
Information
Published : 2026-09-15 20:17
Updated : 2026-09-28 13:48
NVD link : CVE-2026-76707
Mitre link : CVE-2026-76707
CVE.ORG link : CVE-2026-76707
JSON object : View
Products Affected
arubanetworks
- edgeconnect_sd-wan_orchestrator
hpe
- edgeconnect_operating_system
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor