CVE-2026-76701

MediumCVSS 5.9/10Last modified Sep 28, 2026

Description

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retrieve information which could be used to potentially gain further access to network services supported by HPE Networking EdgeConnect SD-WAN Gateways.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published: Sep 15, 2026
Last modified: Sep 28, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-767025.8A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a CVE-2026-767035.5A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow CVE-2026-767045.5A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to CVE-2026-767055.5A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allo CVE-2026-767065.3A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obta CVE-2026-767074.3A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory co CVE-2026-767089.8A vulnerability exists in the Analytics and Location Engine (ALE) where the application and underlying operating system use default, hard-co CVE-2026-767099.8A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Successful exploitation of this vuln CVE-2026-76713.7A vulnerability has been found in CodeWise Tornet Scooter Mobile App 4.75 on iOS/Android. The impacted element is an unknown function of the CVE-2026-767107.5A vulnerability exists in the Analytics and Location Engine (ALE) management interface that may allow for the disclosure of sensitive inform CVE-2026-767117.5A vulnerability exists in an Analytics and Location Engine (ALE) component where the impacted process improperly processes incoming socket c CVE-2026-767127.3A vulnerability exists in the Analytics and Location Engine (ALE) that may allow for unauthorized access, information disclosure, or denial