What is CVE-2026-76707?

CVE-2026-76707 is a medium-severity vulnerability in Hewlett Packard Enterprise (HPE) Edgeconnect Sd-Wan Gateways, classified under Information Disclosure. CVSS score: 4.3/10. Published 2026-09-15.

How severe is CVE-2026-76707?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Information disclosure in Hewlett Packard Enterprise (HPE) Edgeconnect Sd-Wan Gateways

CVE-2026-76707

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.

Vulnerability class: Information Disclosure

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Hewlett Packard Enterprise (Hpe) Edgeconnect Sd-wan Gateways

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security-alert@hpe.com

Frequently asked questions

What is CVE-2026-76707?: CVE-2026-76707 is a medium-severity vulnerability in Hewlett Packard Enterprise (HPE) Edgeconnect Sd-Wan Gateways, classified under Information Disclosure. CVSS score: 4.3/10. Published 2026-09-15.
How severe is CVE-2026-76707?: Medium severity. CVSS v3 base score is 4.3 out of 10.