EUVD-2026-79199
GHSA-mxv3-mw66-58pc
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Unauthenticated network authentication-bypass (PR:N/AV:N/AC:L/UI:N) yielding administrative control and full host compromise (C:H/I:H/A:H); impact stays within the vulnerable component so S:U.
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
Lifecycle Timeline
4DescriptionCVE.org
Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.
AnalysisAI
Unauthenticated remote attackers can bypass authentication controls in the EdgeConnect SD-WAN Orchestrator management API to gain administrative privileges and fully compromise the underlying host, rated 9.8 under CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. Affected builds per the EUVD advisory span EdgeConnect SD-WAN 9.4.0 through 9.4.10, 9.5.0 through 9.5.8, 9.6.0 through 9.6.3, and 9.7.0, although the description attributes the flaw to the Orchestrator while EUVD lists Gateways, so the exact affected component should be confirmed against HPE advisory hpesbnw05135en_us. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires only network reachability to the EdgeConnect SD-WAN Orchestrator management API - no credentials, no privileges, and no user interaction (AV:N/AC:L/PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine top-priority vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No exact fix version appears in the provided intelligence, so the immediate action is to obtain the vendor-determined patched firmware from HPE advisory hpesbnw05135en_us (referenced via NVD at https://nvd.nist.gov/vuln/detail/CVE-2026-76673) and confirm whether the fix applies to the Orchestrator, the Gateways, or both, given the component/version discrepancy between the description and EUVD. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all EdgeConnect SD-WAN Orchestrator and Gateway instances and determine which run affected builds (9.4.0-9.4.10, 9.5.0-9.5.8, 9.6.0-9.6.3, or 9.7.0), immediately removing management API and web UI access from the public internet and restricting it to a hardened management network or VPN with allow-listed source addresses; confirm the exact affected component against HPE advisory hpesbnw05135en_us, since the technical description attributes the flaw to the Orchestrator while the EUVD advisory lists Gateways. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Mana
The read_mru_list function in NTP before 4.2.8p9 allows remote attackers to cause a denial of service (crash) via a craf
A directory traversal vulnerability in Hewlett Packard Enterprise Insight Remote Support may allow remote code execution
A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S
A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access
A vulnerability in HPE Insight Remote Support (IRS) prior to v7.15.0.646 may allow an unauthenticated denial of service
NTP through 4.2.8p12 has a NULL Pointer Dereference. Rated high severity (CVSS 7.5), this vulnerability is remotely expl
Multiple buffer overflows in the ctl_put* functions in NTP before 4.2.8p10 and 4.3.x before 4.3.94 allow remote authenti
Remote authentication bypass in HPE AutoPass License Server (APLS) allows unauthenticated network attackers to circumven
Information disclosure in the HPE Aruba EdgeConnect SD-WAN Orchestrator allows a remote attacker holding only a valid re
Privilege escalation in HPE Networking EdgeConnect SD-WAN Orchestrator (builds 9.4.0 through 9.4.10, 9.5.0 through 9.5.8
Privilege escalation in the HPE Networking EdgeConnect SD-WAN Orchestrator API allows a remote, low-privileged but authe
Share
External POC / Exploit Code
Leaving vuln.today