CVE-2026-76684 — Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API

CVE-2026-76684

Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API PUBLISHED

Description (CNA)

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / EdgeConnect SD-WAN Gateways	affected 9.7.0 through 9.7.0; affected 9.6.0 through 9.6.3; affected 9.5.0 through 9.5.8; affected 9.4.0 through 9.4.10

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.