CVE-2026-76704
Last modified
CVE-2026-76704 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Successful exploitation could allow an attacker to access sensitive information, potentially affecting the confidentiality and integrity of the data processed by the application.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Successful exploitation could allow an attacker to access sensitive information, potentially affecting the confidentiality and integrity of the data processed by the application.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Edgeconnect Sd-Wan Orchestrator | >= 9.4.0, < 9.4.11 |
| Arubanetworks | Edgeconnect Sd-Wan Orchestrator | >= 9.5.0, < 9.5.9 |
| Arubanetworks | Edgeconnect Sd-Wan Orchestrator | >= 9.6.0, < 9.6.4 |
| Arubanetworks | Edgeconnect Sd-Wan Orchestrator | 9.7.0 |
| Hpe | Edgeconnect Operating System | >= 9.4.0.0, < 9.4.9.0 |
| Hpe | Edgeconnect Operating System | >= 9.5.0.0, < 9.5.9.0 |
| Hpe | Edgeconnect Operating System | >= 9.6.0.0, < 9.6.4.0 |
| Hpe | Edgeconnect Operating System | 9.7.0.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-76704?
How severe is CVE-2026-76704?
How do I fix CVE-2026-76704?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-76699A buffer overflow vulnerability exists in a system service w…6.4
- CVE-2026-7670A flaw has been found in Jinher OA 1.0. The affected element…7.3
- CVE-2026-76700Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateway…5.9
- CVE-2026-76701A vulnerability in the API endpoint of HPE Networking EdgeCo…5.9
- CVE-2026-76702A vulnerability in the operating system of HPE Networking Ed…5.8
- CVE-2026-76703A buffer overflow vulnerability exists in the web-based mana…5.5
- CVE-2026-76705A buffer overflow vulnerability exists in the API endpoint o…5.5
- CVE-2026-76706A vulnerability in the API endpoint of HPE Networking EdgeCo…5.3
- CVE-2026-76707A vulnerability in HPE Networking EdgeConnect SD-WAN Gateway…4.3
- CVE-2026-76708A vulnerability exists in the Analytics and Location Engine …9.8
- CVE-2026-76709A vulnerability exists in the internal administrative compon…9.8
- CVE-2026-7671A vulnerability has been found in CodeWise Tornet Scooter Mo…3.7
Are you affected by CVE-2026-76704?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST