Privilege Escalation Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76678

8.8HIGH

Key Information:

Vendor

HP (HP)

Status
Edgeconnect Sd-wan Gateways
Vendor
CVE Published:
15 September 2026

What is CVE-2026-76678?

A vulnerability exists within the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that allows low-privilege authenticated remote attackers to escalate their privileges. If successfully exploited, this vulnerability could grant attackers the ability to execute arbitrary commands with root access on the underlying operating system, potentially compromising the integrity and security of the entire network environment.

Affected Version(s)

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.6.0.0 <= 9.6.3.1

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.