CVE-2026-76680

Name of the Vulnerable Software and Affected Versions EdgeConnect SD-WAN Orchestrator (affected versions not specified)

Description An issue in the API allows a remote attacker with low privileges to perform server-side request forgery (SSRF), a technique where the attacker induces the server to make requests to an unintended location. This can be used to enumerate the internal structure of the host and potentially disclose sensitive information that exceeds the user's authorized privilege level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.