CVE-2026-76688

HighCVSS 7.5

Published: 15/09/2026(UTC)Updated: 25/09/2026(UTC)Translated: 16/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

Vulnerabilities have been identified in the web-based management interface of EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading to complete compromise of the EdgeConnect SD-WAN Orchestrator host.

Risk Assessment

The risk is complete compromise of the SD-WAN orchestrator, potentially allowing the attacker to control the entire SD-WAN infrastructure and access sensitive data.

Recommendation

Apply HPE patches immediately and implement additional security layers such as multi-factor authentication for the management interface.

Other vulnerabilities in HPE EdgeConnect SD-WAN Orchestrator

CVE-2026-76687High
A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS