CVE-2026-76684: Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to exploitation?
EdgeConnect SD-WAN Orchestrator deployments with the affected API reachable by a remote attacker are exposed. The issue does not require prior authentication or user interaction, but exploitation has high attack complexity.
What could an attacker gain if exploitation succeeds?
A successful unauthenticated attacker could bypass existing authentication controls and obtain administrative privileges. This could result in complete compromise of the EdgeConnect SD-WAN Orchestrator host.