CVE-2026-76670
EUVD-2026-7919715.09.2026, 20:17
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.4.0 ≤ 𝑥 < 9.4.11 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.5.0 ≤ 𝑥 < 9.5.9 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.6.0 ≤ 𝑥 < 9.6.4 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.7.0 |
| hpe | edgeconnect_operating_system | 9.4.0.0 ≤ 𝑥 < 9.4.9.0 |
| hpe | edgeconnect_operating_system | 9.5.0.0 ≤ 𝑥 < 9.5.9.0 |
| hpe | edgeconnect_operating_system | 9.6.0.0 ≤ 𝑥 < 9.6.4.0 |
| hpe | edgeconnect_operating_system | 9.7.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration