Memory Exposure Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76707

4.3MEDIUM

Key Information:

Vendor

HP (HP)

Status
Edgeconnect Sd-wan Gateways
Vendor
CVE Published:
15 September 2026

What is CVE-2026-76707?

A memory exposure vulnerability in HPE Networking EdgeConnect SD-WAN Gateways can potentially allow an unauthenticated adjacent attacker to access sensitive system memory contents. This unauthorized access can provide insights into internal services and workflows, augmenting the risk of further exploitation and unauthorized elevation of privileges when combined with additional weaknesses. Organizations using these gateways should implement mitigations promptly to safeguard their network environments.

Affected Version(s)

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.6.0.0 <= 9.6.3.1

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.