{"id":"CVE-2026-76701","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-76701","generatedAt":"2026-10-28T01:19:31.942Z","title":"A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information.","description":"A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.","published":"2026-09-15T20:17:55.000Z","lastModified":"2026-09-28T13:50:05.000Z","status":"Analyzed","sourceIdentifier":"security-alert@hpe.com","cvss":{"version":"3.1","score":5.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-306"],"affected":["arubanetworks/edgeconnect sd-wan orchestrator","hpe/edgeconnect operating system"],"epss":{"score":0.00394,"percentile":0.33339,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.39%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US","tags":["Vendor Advisory"],"source":"security-alert@hpe.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-76701","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}