API Endpoint Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76701

5.9MEDIUM

Key Information:

Vendor

HP (HP)

Status
Edgeconnect Sd-wan Gateways
Vendor
CVE Published:
15 September 2026

What is CVE-2026-76701?

A vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways, potentially allowing unauthenticated remote attackers to access sensitive information. Successful exploitation of this vulnerability can enable unauthorized retrieval of data, which might be leveraged for further exploits to gain access to critical network services supported by the gateways. Organizations utilizing HPE Networking EdgeConnect should assess their setups and implement security measures outlined in the vendor's advisory to mitigate risks.

Affected Version(s)

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.6.0.0 <= 9.6.3.1

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.