CVE-2026-76675
CriticalCVSS 9.1Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. An authenticated remote attacker with high privileges can execute arbitrary commands on the underlying operating system, leading to complete system compromise.
Risk Assessment
Complete system compromise by an attacker with high privileges could result in loss of confidentiality, integrity, and availability of data and disruption of SD-WAN operations.
Recommendation
Apply available security updates from the vendor and restrict access to the command line interface to trusted administrators only.
Other vulnerabilities in EdgeConnect SD-WAN Gateways
See all- CVE-2026-76674Critical
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. An unauthenticated remote attacker can execute arbitrary code, leading to complete system compromise.
- CVE-2026-76677High
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
- CVE-2026-76676High
Buffer overflow vulnerability in the underlying operating system of EdgeConnect SD-WAN Gateways. An unauthenticated adjacent attacker could execute arbitrary code if certain preconditions outside the attacker's control are met. Successful exploitation could lead to complete system compromise.
Original NVD description (English source)
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS