Threat database

Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure of sensitive configuration information. An authenticated remote attacker with read-only privileges could exploit this vulnerability by sending a specially crafted request to the cache synchronization endpoint. Successful exploitation could result in the disclosure of sensitive third-party API tokens and credentials, potentially enabling lateral movement to external security platforms.

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.

CVE-2026-73789 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager (CPPM) affecting certain 6.11.x and 6.12.x versions. It involves the web-based management interface for guest account management, where an unauthenticated remote attacker could manipulate account settings. Exploitation could allow unauthorized extension of network access beyond policy limits, leading to prolonged unauthorized use of network resources. No known exploits are reported in the wild. The vulnerability has a CVSS score of 5.3 and impacts integrity but not confidentiality or availability.

CVE-2026-73788 is a medium severity vulnerability in Hewlett Packard Enterprise ClearPass Policy Manager's OnGuard agent. It allows an authenticated remote attacker to elevate privileges to root on a vulnerable system. This could lead to unauthorized operations on the affected system. The vulnerability affects specific versions of ClearPass Policy Manager between 6.11.0 and 6.12.8. No known exploits are reported in the wild. No patch information is provided in the available data.

A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

CVE-2026-73786 is a high-severity vulnerability in the web-based management interface of Hewlett Packard Enterprise ClearPass Policy Manager (CPPM). It allows an unauthenticated remote attacker to cause a Denial-of-Service (DoS) attack, leading to instability and degraded performance of the CPPM server. The vulnerability affects versions from 6.11.0 up to and including 6.11.14. There are no known exploits in the wild, and no patch information is provided in the available data.

A vulnerability in the web-based management interface of vulnerable CPPM systems could allow an authenticated remote attacker to achieve remote code execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Stack overflow vulnerabilities exist in an API endpoint of AOS-CX. Successful exploitation could allow an authenticated malicious actor to cause a denial-of-service condition on the affected system.

A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system.

A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface.

A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL.

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information.

A vulnerability exists in the Credential Manager component that may allow for unauthorized administrative access. An unauthenticated remote attacker could exploit this vulnerability on a device in its factory-default or post-ZTP state before any administrator has configured credentials by providing a predictable factory-default password. Successful exploitation could result in full administrative control of the affected device during the initial setup process.

Vulnerabilities have been identified in the API endpoint of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls.