← Back

CVE-2026-76694

nvd nist
Published: Sep 15, 2026Modified: Sep 28, 2026

JSON object

Loading...
6.6
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.7 / Impact: 5.9
Source: security-alert@hpe.com (Secondary)

Description

A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a vulnerable system.

Affected (8)

Arubanetworks
1 product
Edgeconnect Sd Wan Orchestrator
Hpe
1 product
Edgeconnect Operating System
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Arubanetworks
Edgeconnect Sd Wan Orchestrator
9.4.0 ≤ version < 9.4.11
Edgeconnect Sd Wan Orchestrator
9.5.0 ≤ version < 9.5.9
Edgeconnect Sd Wan Orchestrator
9.6.0 ≤ version < 9.6.4
Edgeconnect Sd Wan Orchestrator
Version 9.7.0
Configuration B
4 vulnerable
Vulnerable SoftwareAffected Versions
Hpe
Edgeconnect Operating System
9.4.0.0 ≤ version < 9.4.9.0
Edgeconnect Operating System
9.5.0.0 ≤ version < 9.5.9.0
Edgeconnect Operating System
9.6.0.0 ≤ version < 9.6.4.0
Edgeconnect Operating System
Version 9.7.0.0

Related CWEs

CWE-269
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

Source: security-alert@hpe.com
Vendor Advisory

Timeline

No history available yet.