HIGHCVSS 8.50% EPSS
Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remote attacker authenticated with low privileges to conduct server-side request forgery (SSRF) attacks. A successful exploit allows an attacker to enumerate information about the internal structure of the EdgeConnect SD-WAN Orchestrator host leading to potential disclosure of sensitive information beyond what is authorized by the user's existing privilege level.
Published 2026-09-15 · last modified 2026-09-25
| Vendor | Product |
|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator |
| hpe | edgeconnect_operating_system |
Ncerio by BeyondNets · data from NVD, CISA KEV, EPSS.