CVE-2026-76707

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-76707", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "state": "PUBLISHED", "assignerShortName": "hpe", "dateReserved": "2026-08-19T16:12:27.185Z", "datePublished": "2026-09-15T19:24:03.456Z", "dateUpdated": "2026-09-16T11:52:13.783Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "EdgeConnect SD-WAN Gateways", "vendor": "Hewlett Packard Enterprise (HPE)", "versions": [{"lessThanOrEqual": "9.7.0.0", "status": "affected", "version": "9.7.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.6.3.1", "status": "affected", "version": "9.6.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.5.8.1", "status": "affected", "version": "9.5.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.4.8.2", "status": "affected", "version": "9.4.0.0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "reporter", "value": "Internal security research (HPE Networking)."}], "descriptions": [{"lang": "en", "value": "A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "availabilityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2026-09-15T19:24:03.456Z"}, "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US"}], "source": {"advisory": "HPESBNW05135", "discovery": "INTERNAL"}, "title": "Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-15T19:43:27.895014Z", "id": "CVE-2026-76707", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-16T11:52:13.783Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-76707", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-15T19:43:27.895014Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-15T19:43:32.499Z"}}], "cna": {"title": "Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways", "source": {"advisory": "HPESBNW05135", "discovery": "INTERNAL"}, "credits": [{"lang": "en", "type": "reporter", "value": "Internal security research (HPE Networking)."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hewlett Packard Enterprise (HPE)", "product": "EdgeConnect SD-WAN Gateways", "versions": [{"status": "affected", "version": "9.7.0.0", "versionType": "semver", "lessThanOrEqual": "9.7.0.0"}, {"status": "affected", "version": "9.6.0.0", "versionType": "semver", "lessThanOrEqual": "9.6.3.1"}, {"status": "affected", "version": "9.5.0.0", "versionType": "semver", "lessThanOrEqual": "9.5.8.1"}, {"status": "affected", "version": "9.4.0.0", "versionType": "semver", "lessThanOrEqual": "9.4.8.2"}], "defaultStatus": "affected"}], "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities."}], "providerMetadata": {"orgId": "eb103674-0d28-4225-80f8-39fb86215de0", "shortName": "hpe", "dateUpdated": "2026-09-15T19:24:03.456Z"}}}, "cveMetadata": {"cveId": "CVE-2026-76707", "state": "PUBLISHED", "dateUpdated": "2026-09-16T11:52:13.783Z", "dateReserved": "2026-08-19T16:12:27.185Z", "assignerOrgId": "eb103674-0d28-4225-80f8-39fb86215de0", "datePublished": "2026-09-15T19:24:03.456Z", "assignerShortName": "hpe"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "EdgeConnect SD-WAN Gateways", "vendor": "Hewlett Packard Enterprise (HPE)", "versions": [{"lessThanOrEqual": "9.7.0.0", "status": "affected", "version": "9.7.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.6.3.1", "status": "affected", "version": "9.6.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.5.8.1", "status": "affected", "version": "9.5.0.0", "versionType": "semver"}, {"lessThanOrEqual": "9.4.8.2", "status": "affected", "version": "9.4.0.0", "versionType": "semver"}]}], "source": "security-alert@hpe.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*", "matchCriteriaId": "3E8BB761-5AEC-4765-A95C-AEF7C98A0E29", "versionEndExcluding": "9.4.11", "versionStartIncluding": "9.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E5BDE58-9DC1-474B-85DD-829711373690", "versionEndExcluding": "9.5.9", "versionStartIncluding": "9.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:*:*:*:*:*:*:*:*", "matchCriteriaId": "9712F8F6-023D-473C-AA93-DBF5478C321C", "versionEndExcluding": "9.6.4", "versionStartIncluding": "9.6.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0:*:*:*:*:*:*:*", "matchCriteriaId": "CAA50358-9871-4DDB-82FC-7F40A24D010A", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "54E3B50C-9E5F-4723-A800-F56C78CC7B6A", "versionEndExcluding": "9.4.9.0", "versionStartIncluding": "9.4.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "EB1D2C6C-BDC6-4980-8285-5ED3FD35E9A1", "versionEndExcluding": "9.5.9.0", "versionStartIncluding": "9.5.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:*:*:*:*:*:*:*:*", "matchCriteriaId": "F2F43C93-AE07-4853-BCF7-4F8EEC6AA3B3", "versionEndExcluding": "9.6.4.0", "versionStartIncluding": "9.6.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "ED7727E9-BDC6-46A0-99D0-C8CA4613CF95", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities."}], "id": "CVE-2026-76707", "lastModified": "2026-09-28T13:48:47.503", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security-alert@hpe.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-76707", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-15T19:43:27.895014Z", "version": "2.0.3"}}]}, "published": "2026-09-15T20:17:56.483", "references": [{"source": "security-alert@hpe.com", "tags": ["Vendor Advisory"], "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US"}], "sourceIdentifier": "security-alert@hpe.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.7.0.0,9.7.0.0]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.6.0.0,9.6.3.1]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.5.0.0,9.5.8.1]"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[9.4.0.0,9.4.8.2]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "EdgeConnect SD-WAN Gateways", "source": "cna", "vendor": "Hewlett Packard Enterprise (HPE)"}, "product": "edgeconnect_sd-wan_gateways", "vendor": "hewlett_packard_enterprise_(hpe)"}], "created": "2026-09-15T23:30:07.713720+00:00", "updated": "2026-09-20T12:45:17.435851+00:00", "vendors": ["hewlett_packard_enterprise_(hpe)", "hewlett_packard_enterprise_(hpe)$PRODUCT$edgeconnect_sd-wan_gateways"]}