CVE-2026-76707

Summary

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.

Affected Software

VendorProductVersion RangeStatus
Hewlett Packard Enterprise (HPE)EdgeConnect SD-WAN Gateways9.7.0.0 <= 9.7.0.0affected
Hewlett Packard Enterprise (HPE)EdgeConnect SD-WAN Gateways9.6.0.0 <= 9.6.3.1affected
Hewlett Packard Enterprise (HPE)EdgeConnect SD-WAN Gateways9.5.0.0 <= 9.5.8.1affected
Hewlett Packard Enterprise (HPE)EdgeConnect SD-WAN Gateways9.4.0.0 <= 9.4.8.2affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References