CVE-2026-76706
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk34th percentile - higher than 34% of all known CVEs
Summary
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.
Risk Assessment
Risk of disclosure of security configuration information, which may help an attacker in planning and executing attacks on the infrastructure.
Recommendation
Apply security updates from HPE and restrict access to the orchestrator API to trusted networks only.
Other vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator
Original NVD description (English source)
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS