CRITICALCVSS 9.91% EPSS
A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of sensitive third-party API tokens and credentials, potentially enabling lateral movement to external security platforms.
Published 2026-09-15 · last modified 2026-09-25
| Vendor | Product |
|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator |
| hpe | edgeconnect_operating_system |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.