CVE-2026-76681

Analyzed Analyzed - Analysis Complete

Information Disclosure in EdgeConnect SD-WAN Orchestrator

Publication date: 2026-09-15

Last updated on: 2026-09-25

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker with low privileges to access sensitive information beyond what is authorized by the user's existing privilege level. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by EdgeConnect SD-WAN Orchestrator.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-25

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76681

EUVD

EUVD-2026-79207

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This vulnerability in EdgeConnect SD-WAN Orchestrator's API allows an authenticated remote attacker with low privileges to access sensitive information beyond their authorized level. Successful exploitation could let the attacker retrieve data that might help them gain further access to network services supported by the system.

Detection Guidance

This vulnerability requires authenticated access to exploit, so detection should focus on monitoring API access logs for unusual activity by low-privilege users. Check EdgeConnect SD-WAN Orchestrator logs for unauthorized data retrieval attempts or privilege escalation patterns.

Impact Analysis

An attacker could exploit this to steal sensitive network information, potentially leading to unauthorized access to network services. This could compromise network security, expose confidential data, or enable further attacks on connected systems.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating confidentiality requirements in GDPR and HIPAA. Organizations using EdgeConnect SD-WAN Orchestrator may face compliance violations, legal penalties, and reputational damage due to potential data breaches.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for EdgeConnect SD-WAN Orchestrator. Review and restrict user privileges to the minimum required for their roles. Monitor network traffic for unusual API access patterns or unauthorized data retrieval attempts.

Hi! I’m here to help you understand CVE-2026-76681. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70