« Volver al listado

CVE-2026-76706

Estado: AnalizadaMedia (5.3)—

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Arubanetworks — Edgeconnect Sd-wan OrchestratorHPE — Edgeconnect Operating System

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-76706",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-76706",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-09-15T19:45:37.548012Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-alert@hpe.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security-alert@hpe.com",
      "affectedData": [
        {
          "vendor": "Hewlett Packard Enterprise (HPE)",
          "product": "EdgeConnect SD-WAN Gateways",
          "versions": [
            {
              "status": "affected",
              "version": "9.7.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0"
            },
            {
              "status": "affected",
              "version": "9.6.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.6.3"
            },
            {
              "status": "affected",
              "version": "9.5.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.5.8"
            },
            {
              "status": "affected",
              "version": "9.4.0",
              "versionType": "semver",
              "lessThanOrEqual": "9.4.10"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-15T20:17:55.973",
  "references": [
    {
      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security-alert@hpe.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks."
    }
  ],
  "lastModified": "2026-09-25T12:56:59.010",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E8BB761-5AEC-4765-A95C-AEF7C98A0E29",
              "versionEndExcluding": "9.4.11",
              "versionStartIncluding": "9.4.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4E5BDE58-9DC1-474B-85DD-829711373690",
              "versionEndExcluding": "9.5.9",
              "versionStartIncluding": "9.5.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9712F8F6-023D-473C-AA93-DBF5478C321C",
              "versionEndExcluding": "9.6.4",
              "versionStartIncluding": "9.6.0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAA50358-9871-4DDB-82FC-7F40A24D010A"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54E3B50C-9E5F-4723-A800-F56C78CC7B6A",
              "versionEndExcluding": "9.4.9.0",
              "versionStartIncluding": "9.4.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB1D2C6C-BDC6-4980-8285-5ED3FD35E9A1",
              "versionEndExcluding": "9.5.9.0",
              "versionStartIncluding": "9.5.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2F43C93-AE07-4853-BCF7-4F8EEC6AA3B3",
              "versionEndExcluding": "9.6.4.0",
              "versionStartIncluding": "9.6.0.0"
            },
            {
              "criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED7727E9-BDC6-46A0-99D0-C8CA4613CF95"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security-alert@hpe.com"
}