CVE-2026-76677
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk41th percentile - higher than 41% of all known CVEs
Summary
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
Risk Assessment
The vulnerability could allow an attacker to gain full control over the management interface and system, posing a critical threat to network security.
Recommendation
Immediately apply security updates for EdgeConnect SD-WAN Gateways and restrict web management interface access to trusted networks only.
Other vulnerabilities in EdgeConnect SD-WAN Gateways
See all- CVE-2026-76675Critical
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. An authenticated remote attacker with high privileges can execute arbitrary commands on the underlying operating system, leading to complete system compromise.
- CVE-2026-76674Critical
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. An unauthenticated remote attacker can execute arbitrary code, leading to complete system compromise.
- CVE-2026-76676High
Buffer overflow vulnerability in the underlying operating system of EdgeConnect SD-WAN Gateways. An unauthenticated adjacent attacker could execute arbitrary code if certain preconditions outside the attacker's control are met. Successful exploitation could lead to complete system compromise.
Original NVD description (English source)
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS