MEDIUM

CVE-2026-76706

2026-09-15 CVSS v3.1

CVSS

5.3

Description

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.

Weakness (CWE)

CWE-200 Information Exposure

EPSS Score

0.42%

Probability of exploitation in next 30 days

35.9th percentile

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE