CVE-2026-76707

Analyzed Analyzed - Analysis Complete

Unauthenticated Memory Disclosure in HPE EdgeConnect SD-WAN Gateway

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76707

EUVD

EUVD-2026-79233

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in HPE Networking EdgeConnect SD-WAN Gateways allows an unauthenticated attacker within the same network to view some system memory contents. This could expose internal services and workflows, potentially aiding further attacks.

Impact Analysis

An attacker could gain insight into your network's internal operations, increasing the risk of unauthorized access or privilege escalation if combined with other vulnerabilities.

Compliance Impact

This vulnerability may expose system memory contents, potentially leading to unauthorized access to sensitive data. This could violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Apply patches or updates provided by HPE for the EdgeConnect SD-WAN Gateways to address the memory exposure issue. Monitor HPE security advisories for updates and restrict network access to affected systems until patched.

Hi! I’m here to help you understand CVE-2026-76707. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70