CRITICAL 9.8 NVD

CVE-2026-76673

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent ex

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

References

Published: 2026-09-15 · Source: NVD · Feed updated: 2026-09-15
This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-15 via NVD.

Risk Timeline

CVE Disclosed2026-09-15 · -1 days ago

Remediation Resources

Analysis & PoC
support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLoc
vulnfeed aggregates 14340 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.