CVE-2026-76675

CriticalCVSS 9.1

Published: 15/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Summary

A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. An authenticated remote attacker with high privileges can execute arbitrary commands on the underlying operating system, leading to complete system compromise.

Risk Assessment

Complete system compromise by an attacker with high privileges could result in loss of confidentiality, integrity, and availability of data and disruption of SD-WAN operations.

Recommendation

Apply available security updates from the vendor and restrict access to the command line interface to trusted administrators only.

Other vulnerabilities in EdgeConnect SD-WAN Gateways

CVE-2026-76674Critical
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. An unauthenticated remote attacker can execute arbitrary code, leading to complete system compromise.

Original NVD description (English source)

A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise.