CVE-2026-76694

EUVD-2026-79220
A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a vulnerable system.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.6 MEDIUM
NETWORK
HIGH
HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 45.31%
Affected Products (NVD)
VendorProductVersion
arubanetworksedgeconnect_sd-wan_orchestrator
9.4.0 ≤
𝑥
< 9.4.11
arubanetworksedgeconnect_sd-wan_orchestrator
9.5.0 ≤
𝑥
< 9.5.9
arubanetworksedgeconnect_sd-wan_orchestrator
9.6.0 ≤
𝑥
< 9.6.4
arubanetworksedgeconnect_sd-wan_orchestrator
9.7.0
hpeedgeconnect_operating_system
9.4.0.0 ≤
𝑥
< 9.4.9.0
hpeedgeconnect_operating_system
9.5.0.0 ≤
𝑥
< 9.5.9.0
hpeedgeconnect_operating_system
9.6.0.0 ≤
𝑥
< 9.6.4.0
hpeedgeconnect_operating_system
9.7.0.0
𝑥
= Vulnerable software versions