CVE Notifier

CVE-2026-69206 CWE-294 5.9

Http4s: DigestAuth allows replay of captured requests

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, DigestAuth replay protection records lastNc plus one instead of the highest nonce-count value it has accepted. When a legitimate client sends…

cve.org http4s:http4s 15 Sep 2026

CVE-2026-18422 CWE-862 N/A

Concrete CMS below 9.5.3 Multilingual Page Assign Action Lacks Destination Authorization and CSRF Token Validation

Concrete CMS before 9.5.3 did not enforce a destination-side authorization check and did not validate a CSRF token in the multilingual page assignment backend action (Backend\Page\Multilingual::assign). As a result, an a…

cve.org Concrete · CMS:Concrete · CMS 15 Sep 2026

CVE-2026-69202 CWE-400 7.5

Http4s Ember HTTP/2: unbounded inbound body buffering

Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control window is replenished according to bytes received from the network rather than bytes consumed by the application,…

cve.org http4s:http4s 15 Sep 2026

CVE-2026-76707 CWE-? 4.3

Unauthenticated Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents. Successful exploitation could allow an attacker to gain insight into int…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026

CVE-2026-76706 CWE-? 5.3

Unauthenticated Information Disclosure in EdgeConnect SD-WAN Orchestrator API allows exposure of sensitive data

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information. Successful exploitation could result in the disclosure…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026

CVE-2026-76705 CWE-? 5.5

Authenticated Buffer Overflow Vulnerability in an API Endpoint Leads to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways

A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with Admin privilege to execute arbitrary com…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026

CVE-2026-76704 CWE-? 5.5

Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface

A vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affec…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026

CVE-2026-76703 CWE-? 5.5

Authenticated Buffer Overflow Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways Web-Based Management Interface Causes Denial-of-Service

A buffer overflow vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways that could allow an authenticated attacker with administrative access to cause a denial of servic…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026

CVE-2026-76702 CWE-? 5.8

Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service. Successful exploitation could allow an attacker to disrupt s…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026

CVE-2026-76701 CWE-? 5.9

Unauthenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Gateways

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to access sensitive information. Successful exploitation could allow an attacker to retriev…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026

CVE-2026-76700 CWE-? 5.9

Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated remote attacker to cause a denial-of-service. Successful exploitation could allow an attacker to interrupt the normal operation…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026

CVE-2026-76699 CWE-? 6.4

Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

A buffer overflow vulnerability exists in a system service within the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated adjacent attacker to cause a denial-of-s…

cve.org Hewlett · Packard · Enterprise 15 Sep 2026