« Volver al listado

CVE-2026-76707

Estado: AnalizadaMedia (4.3)—

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Arubanetworks — Edgeconnect Sd-wan OrchestratorHPE — Edgeconnect Operating System

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-76707",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-76707",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-09-15T19:43:27.895014Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-alert@hpe.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "ADJACENT_NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "Hewlett Packard Enterprise (HPE)",
          "product": "EdgeConnect SD-WAN Gateways",
          "versions": [
            {
              "status": "affected",
              "version": "9.7.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0.0"
            },
            {
              "status": "affected",
              "version": "9.6.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.6.3.1"
            },
            {
              "status": "affected",
              "version": "9.5.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.5.8.1"
            },
            {
              "status": "affected",
              "version": "9.4.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.4.8.2"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-15T20:17:56.483",
  "references": [
    {
      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities."
    }
  ],
  "lastModified": "2026-09-28T13:48:47.503",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E8BB761-5AEC-4765-A95C-AEF7C98A0E29",
              "versionEndExcluding": "9.4.11",
              "versionStartIncluding": "9.4.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E5BDE58-9DC1-474B-85DD-829711373690",
              "versionEndExcluding": "9.5.9",
              "versionStartIncluding": "9.5.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9712F8F6-023D-473C-AA93-DBF5478C321C",
              "versionEndExcluding": "9.6.4",
              "versionStartIncluding": "9.6.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAA50358-9871-4DDB-82FC-7F40A24D010A"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54E3B50C-9E5F-4723-A800-F56C78CC7B6A",
              "versionEndExcluding": "9.4.9.0",
              "versionStartIncluding": "9.4.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB1D2C6C-BDC6-4980-8285-5ED3FD35E9A1",
              "versionEndExcluding": "9.5.9.0",
              "versionStartIncluding": "9.5.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2F43C93-AE07-4853-BCF7-4F8EEC6AA3B3",
              "versionEndExcluding": "9.6.4.0",
              "versionStartIncluding": "9.6.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED7727E9-BDC6-46A0-99D0-C8CA4613CF95"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}