CVE-2026-76675
EUVD-2026-7920115.09.2026, 20:17
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.4.0 ≤ 𝑥 < 9.4.11 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.5.0 ≤ 𝑥 < 9.5.9 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.6.0 ≤ 𝑥 < 9.6.4 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.7.0 |
| hpe | edgeconnect_operating_system | 9.4.0.0 ≤ 𝑥 < 9.4.9.0 |
| hpe | edgeconnect_operating_system | 9.5.0.0 ≤ 𝑥 < 9.5.9.0 |
| hpe | edgeconnect_operating_system | 9.6.0.0 ≤ 𝑥 < 9.6.4.0 |
| hpe | edgeconnect_operating_system | 9.7.0.0 |
𝑥
= Vulnerable software versions