CVE-2026-76698
MEDIUMCVSS 6.5Description
A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain conditions, could result in the execution of arbitrary commands with elevated privileges or a denial-of-service condition on the affected appliance.
Timeline
Published:September 15th, 2026 8:17 PM
Last modified:September 28th, 2026 1:52 PM
CVSS Scoring
CVSS v3: 6.5 (MEDIUM)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Software
From NVD CPE configuration data
Vendors
arubanetworkshpe
Products
edgeconnect_sd-wan_orchestratoredgeconnect_operating_system
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute