CVE-2026-76672: Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator
A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of sensitive third-party API tokens and credentials, potentially enabling lateral movement to external security platforms.
Affected Software
Event History
Frequently Asked Questions
Which accounts can exploit this issue?
Any authenticated remote account with read-only privileges may be able to exploit it. The attack does not require user interaction.
What information could be exposed if exploitation succeeds?
The issue may disclose sensitive configuration information, including third-party API tokens and credentials. Exposed credentials could potentially be used for lateral movement to external security platforms.
What endpoint is involved in exploitation?
Exploitation involves sending a specially crafted request to the cache synchronization endpoint.