CVE-2026-76704

Analyzed Analyzed - Analysis Complete

Authenticated Stored XSS in EdgeConnect SD-WAN Orchestrator

Publication date: 2026-09-15

Last updated on: 2026-09-25

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Successful exploitation could allow an attacker to access sensitive information, potentially affecting the confidentiality and integrity of the data processed by the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-25

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76704

EUVD

EUVD-2026-79230

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-79	The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

Executive Summary

This vulnerability is a cross-site scripting (XSS) flaw in the web-based management interface of the EdgeConnect SD-WAN Orchestrator. An authenticated remote attacker can inject malicious scripts that execute in a victim's browser within the affected interface. This could lead to unauthorized access to sensitive data or manipulation of the application's behavior.

Detection Guidance

This vulnerability involves a reflected cross-site scripting (XSS) flaw in the EdgeConnect SD-WAN Orchestrator web interface. Detection requires inspecting web traffic for malicious scripts injected via crafted URLs or input fields. Monitor browser console logs for unexpected script execution and review server logs for unusual requests targeting the web interface.

Impact Analysis

If exploited, this vulnerability could allow an attacker to steal sensitive information such as session cookies or credentials, potentially leading to unauthorized access to the system. It may also enable the attacker to perform actions on behalf of the victim within the management interface.

Compliance Impact

This vulnerability could compromise data confidentiality and integrity, which are key requirements under GDPR and HIPAA. A successful exploit may lead to unauthorized access to personal or health data, potentially resulting in non-compliance with these regulations and associated penalties.

Mitigation Strategies

Update the EdgeConnect SD-WAN Orchestrator to the latest patched version immediately. Restrict access to the web-based management interface to trusted networks or IP addresses. Monitor network traffic for unusual activity and enforce strong authentication measures for all users.

Hi! I’m here to help you understand CVE-2026-76704. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70