ES
Product
Edgeconnect Sd-wan Orchestrator
by Arubanetworks · last CVE Sep 15, 2026
71
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 8High 37Medium 26Low 0
Watch

Add Edgeconnect Sd-wan Orchestrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-76672
9.9
1%
Sep 15
Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator
Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0
CVE-2026-76670
9.9
0%
Sep 15
Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0
CVE-2026-76669
9.9
0%
Sep 15
Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0
CVE-2026-76674
9.8
1%
Sep 15
Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways
Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0
CVE-2026-76673
9.8
1%
Sep 15
Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator
Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0
CVE-2025-37184
9.8
1%
Jan 14
Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention
Affected: 9.2.0 through 9.2.10; 9.3.0 before 9.3.6; 9.4.0 before 9.4.3; 9.5.0 before 9.5.6; 9.6.0
CVE-2026-76675
9.1
1%
Sep 15
Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways
Affected: 9.4.0 before 9.4.11; 9.5.0 before 9.5.9; 9.6.0 before 9.6.4; 9.7.0
CVE-2024-41914
9.0
1%
Jul 24
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting…
Affected: 9.1.0 through 9.1.9; 9.2.0 through 9.2.9; 9.3.0 through 9.3.2; 9.4.0 through 9.4.1
Showing 8