EUVD-2026-79230

A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. Successful exploitation could allow an attacker to access...

CVE-2026-76704

HPE EdgeConnect SD-WAN Orchestrator web-based management interface is affected by an authenticated stored XSS vulnerability. An attacker with a valid account can inject malicious script that executes in a victim's browser within the interface context, potentially allowing access to sensitive info...

CVE-2026-76703 Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service

A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of service. Successful exploitation could allow an attacker to disrupt system...

CVE-2026-76698

CVE-2026-76698 affects the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways . An authenticated remote attacker with limited privileges can exploit a command injection flaw via specially crafted input, potentially executing arbitrary commands with elevated privileges or...

CVE-2026-76698 Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

CVE-2026-76698 Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

EUVD-2026-79224

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain...

EUVD-2026-79223

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

CVE-2026-76697 Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

CVE-2026-76697

CVE-2026-76697 is an authenticated information disclosure vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways . A remote attacker with low-privilege authentication can retrieve sensitive information that could be leveraged to gain further access to ne...

CVE-2026-76697 Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

EUVD-2026-79214

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...

CVE-2026-76688 Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...

CVE-2026-76688 Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative...

CVE-2026-76688

Multiple authentication bypass vulnerabilities in the web-based management interface of HPE EdgeConnect SD-WAN Orchestrator allow an unauthenticated remote actor to circumvent authentication controls. Successful exploitation grants administrative privileges , potentially leading to complete compr...

CVE-2026-76677 Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise...

CVE-2026-76677

CVE-2026-76677 is an authorization bypass in the API of HPE Networking EdgeConnect SD-WAN Gateways that enables a remote, low-privileged authenticated user to escalate to administrative access on the web-management interface, potentially leading to complete system compromise . The vulnerability i...

EUVD-2026-79203

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise...

FACT_core v4.4.1

The Firmware Analysis and Comparison Tool FACT Contents Why FACT? Setup Usage Documentation Contribute Additional plugins Analysis Import/Export Presentations Social Acknowledgments License Why FACT? Firmware analysis can be used to achieve several interesting goals. Chief among those are...

Malicious Package

Overview web-main is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...