CVE-2026-76692

Katalog CVE

CVSS 7.1 · High EPSS 0,28%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system. Skor CVSS 3.1 7.1 (High) menurut hpe.com.

Deskripsi (NVD)

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to obtain limited information from memory and disrupt the normal operation of the affected service. Successful exploitation could result in a denial of service (system crash) or the disclosure of uninitialized stack memory.

Rincian

Terbit di NVD

15 September 2026

Terakhir diubah

28 September 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber hpe.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

EPSS (30 hari)

0,28% peluang dieksploitasi; lebih tinggi dari 18,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US advisory vendor