CVE-2026-76684

HighCVSS 8.1

Published: 15/09/2026(UTC)Updated: 25/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

37th percentile - higher than 37% of all known CVEs

Summary

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

Risk Assessment

The vulnerability could lead to complete compromise of the Orchestrator host, giving an attacker control over the management of the entire SD-WAN infrastructure.

Recommendation

Urgently apply security updates for EdgeConnect SD-WAN Orchestrator and restrict API access to trusted networks only.

Other vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator

CVE-2026-76706Medium
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS