CVE search · CVE-2026-76690

CVE-2026-76690

high 7.2

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could result in remote code execution as root.

Open in the NVD CVE.org JSON

Status: Analyzed
Published: 2026-09-15
Last changed: 2026-09-28
Source: security-alert@hpe.com
Weakness: CWE-78

Severity

Version	Score	Vector	Source
CVSS 3.1	high 7.2	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`	security-alert@hpe.comSecondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

arubanetworks · edgeconnect_sd-wan_orchestrator
hpe · edgeconnect_operating_system

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_USVendor Advisory

CVE-2026-76690

Details

Severity

Affected products

References