Vulnerability Details CVE-2026-76680
Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information beyond what is authorized by the user's existing privilege level.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 27.1%
CVSS Severity
CVSS v3 Score 8.5
Products affected by CVE-2026-76680
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.0
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.1
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.2
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.3
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.4
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.5.0
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.5.6
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.6.0
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.7.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.0.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.5
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.6
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.7
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.8
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.9
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.4.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.4.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.4.3
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.5.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.6.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.6.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.6.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.6.3
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.7.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.7.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.7.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.8.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.8.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.8.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.0.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.3.5
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.3.6
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.3.7
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.3.8
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.4.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.5.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.5.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.3
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.4
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.5
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.6
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.7.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.7.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.8.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.8.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.0.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.1.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.2.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.2.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.3.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.3.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0