CVE-2026-76706

CVE-2026-76706 affects the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator , allowing an unauthenticated remote attacker to obtain sensitive information. Successful exploitation results in the disclosure of security-relevant configuration details and security feature status , which...

CVE-2026-82882: Missing Authorization

Devtron through 2.2.0 fails to enforce authorization checks on the GET /orchestrator/api-token/webhook endpoint, allowing authenticated users to retrieve admin API tokens. Attackers with any authenticated account can query the endpoint with arbitrary project, environment, and application paramete...

CVE-2026-17191

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...