CVE-2026-76677
HighCVSS 8.8Summary
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
Risk Assessment
The vulnerability could allow an attacker to gain full control over the management interface and system, posing a critical threat to network security.
Recommendation
Immediately apply security updates for EdgeConnect SD-WAN Gateways and restrict web management interface access to trusted networks only.
Other vulnerabilities in EdgeConnect SD-WAN Gateways
See all- CVE-2026-76676High
Buffer overflow vulnerability in the underlying operating system of EdgeConnect SD-WAN Gateways. An unauthenticated adjacent attacker could execute arbitrary code if certain preconditions outside the attacker's control are met. Successful exploitation could lead to complete system compromise.
- CVE-2026-76675Critical
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. An authenticated remote attacker with high privileges can execute arbitrary commands on the underlying operating system, leading to complete system compromise.
- CVE-2026-76674Critical
Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN Gateways. An unauthenticated remote attacker can execute arbitrary code, leading to complete system compromise.
Original NVD description (English source)
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.