CVE-2026-76680

Description

Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information beyond what is authorized by the user's existing privilege level.

Traduire en français

Produits concernés

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
• Arubanetworks edgeconnect sd-wan orchestrator
• Hpe edgeconnect operating system

Scores CVSS

Faiblesses (CWE)

• CWE-918

Références

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories