{"id":"CVE-2026-76707","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-76707","generatedAt":"2026-10-28T00:53:08.602Z","title":"A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents.","description":"A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.","published":"2026-09-15T20:17:56.000Z","lastModified":"2026-09-28T13:48:48.000Z","status":"Analyzed","sourceIdentifier":"security-alert@hpe.com","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-200"],"affected":["arubanetworks/edgeconnect sd-wan orchestrator","hpe/edgeconnect operating system"],"epss":{"score":0.00233,"percentile":0.14069,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US","tags":["Vendor Advisory"],"source":"security-alert@hpe.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-76707","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}