CVE-2026-76672
critical · 9.9A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of sensitive third-party API tokens and credentials, potentially enabling lateral movement to external security platforms.
9.9
CVSS
0.5%
EPSS (exploit prob.)
45th
EPSS percentile
2026-09-15
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Weaknesses
CWE-200
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.4.0, < 9.4.11 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.5.0, < 9.5.9 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.6.0, < 9.6.4 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.7.0 |
| hpe | edgeconnect_operating_system | >= 9.4.0.0, < 9.4.9.0 |
| hpe | edgeconnect_operating_system | >= 9.5.0.0, < 9.5.9.0 |
| hpe | edgeconnect_operating_system | >= 9.6.0.0, < 9.6.4.0 |
| hpe | edgeconnect_operating_system | 9.7.0.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-76672