Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-76707

Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

CVSS 3.1 4.3 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-76707

Published

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-76707

Published

EdgeConnect SD-WAN Gateways

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "affected",
                    "product": "EdgeConnect SD-WAN Gateways",
                    "vendor": "Hewlett Packard Enterprise (HPE)",
                    "versions": [
                        {
                            "lessThanOrEqual": "9.7.0.0",
                            "status": "affected",
                            "version": "9.7.0.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThanOrEqual": "9.6.3.1",
                            "status": "affected",
                            "version": "9.6.0.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThanOrEqual": "9.5.8.1",
                            "status": "affected",
                            "version": "9.5.0.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThanOrEqual": "9.4.8.2",
                            "status": "affected",
                            "version": "9.4.0.0",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON