Arubanetworks Edgeconnect Sd Wan Orchestrator vulnerabilities
67 vulnerabilities
Known vulnerabilities in Arubanetworks Edgeconnect Sd Wan Orchestrator, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-37184arubanetworksedgeconnect_sd-wan_orchestrator+1
EPSS score0.65%
A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby compromising the integrity of secured access to the system.CVE-2025-37181arubanetworksedgeconnect_sd-wan_orchestrator+1EPSS score0.48%
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.CVE-2025-37182arubanetworksedgeconnect_sd-wan_orchestrator+1EPSS score0.48%
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.CVE-2025-37183arubanetworksedgeconnect_sd-wan_orchestrator+1EPSS score0.48%
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to perform SQL injection attacks. Successful exploitation could allow an attacker to execute arbitrary SQL commands on the underlying database, potentially leading to unauthorized data access or data manipulation.CVE-2025-37185arubanetworksedgeconnect_sd-wan_orchestrator+1EPSS score0.27%
Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attacks against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface and thereby make unauthorized arbitrary configuration changes to the host.CVE-2024-41136arubanetworksedgeconnect_sd-wan_orchestrator+1EPSS score0.91%
An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system.CVE-2024-41914arubanetworksedgeconnect_sd-wan_orchestrator+1EPSS score0.54%
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.CVE-2024-22443arubanetworksedgeconnect_sd-wan_orchestrator+1EPSS score0.78%
A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.CVE-2024-22444arubanetworksedgeconnect_sd-wan_orchestrator+1EPSS score0.30%
A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface.CVE-2026-76684arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.46%
Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.CVE-2026-76673arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.61%
Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.CVE-2026-76677arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.54%
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.CVE-2026-76699arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.22%
A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-service. Successful exploitation could allow an attacker to crash the impacted service and temporarily disrupting network operations.CVE-2026-76696arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.27%
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.CVE-2026-76678arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.63%
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.CVE-2026-76674arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score1.01%
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to execute arbitrary code. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise.CVE-2026-76707arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.23%
A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into internal services and workflows, increasing the risk of unauthorized access and elevated privileges when combined with other vulnerabilities.CVE-2026-76670arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.50%
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.CVE-2026-76675arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score1.45%
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise.CVE-2026-76706arubanetworksedgeconnect_sd-wan_orchestrator+2EPSS score0.42%
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure of security-relevant configuration details and security feature status, which could be used to facilitate further attacks.