CVE-2026-76669: Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator
Published Sep 15, 2026
·Updated
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
Affected Software
1 affected component
HPE EdgeConnect SD-WAN Orchestrator
Event History
Sep 15, 2026
CVE Published
via MITRE·07:23 PM
Data Sourced
via MITRE·07:23 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this vulnerability?
A remote attacker must already have a low-privileged authenticated account on an affected HPE EdgeConnect SD-WAN Orchestrator. No user interaction is required.
2
What access could an attacker gain?
Successful exploitation can elevate a low-privileged account to administrative privileges. The resulting administrative access could lead to complete system compromise.