{"id":"CVE-2026-76707","aliases":["EUVD-2026-79233","GHSA-4537-j9w9-4jwp"],"status":"published","title":"Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways","description":"A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00233,"percentile":0.14261,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2026-09-15T19:24:03Z","modified":"2026-09-28T13:48:47Z","products":[{"vendor":"arubanetworks","product":"edgeconnect_sd-wan_orchestrator"},{"vendor":"hewlett packard enterprise (hpe)","product":"edgeconnect sd-wan gateways"},{"vendor":"hpe","product":"edgeconnect_operating_system"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us\u0026docLocale=en_US","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76707"},{"url":"https://github.com/advisories/GHSA-4537-j9w9-4jwp"}],"sources":{"cve":[{"id":"CVE-2026-76707","title":"Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways","description":"A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.","status":"published","published":"2026-09-15T19:24:03.456Z","modified":"2026-09-16T11:52:13.783Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T13:46:21.568011Z"}],"euvd":[{"id":"EUVD-2026-79233","description":"A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.","status":"published","published":"2026-09-15T19:24:03Z","modified":"2026-09-16T11:52:13Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T17:28:16.201278Z"}],"ghsa":[{"id":"GHSA-4537-j9w9-4jwp","title":"A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated...","description":"A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.","status":"published","published":"2026-09-15T21:31:36Z","modified":"2026-09-16T12:30:30Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T15:11:58.348846Z"}],"nvd":[{"id":"CVE-2026-76707","description":"A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.","status":"published","published":"2026-09-15T20:17:56.483Z","modified":"2026-09-28T13:48:47.503Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:12:47.974509Z"}]}}