Privilege Escalation Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
CVE-2026-76694

6.6MEDIUM

Key Information:

Vendor

HP (HP)

Status
Edgeconnect Sd-wan Gateways
Vendor
CVE Published:
15 September 2026

What is CVE-2026-76694?

A vulnerability exists within the command line interface of HPE Networking EdgeConnect SD-WAN Gateways that allows authenticated remote attackers to escalate their privileges. When exploited, this allows the attacker to gain higher privileges than their authorized access level, resulting in the potential execution of arbitrary code on the compromised system. Organizations utilizing this product should ensure appropriate security measures are in place to mitigate the risks associated with this vulnerability.

Affected Version(s)

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.7.0.0

EdgeConnect SD-WAN Gateways 9.6.0.0 <= 9.6.3.1

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
6.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.