CVE-2026-76675: Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways
Published Sep 15, 2026
·Updated
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected Software
1 affected component
EdgeConnect SD-WAN Gateways
Event History
Sep 15, 2026
CVE Published
via MITRE·07:23 PM
Data Sourced
via MITRE·07:23 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker must be authenticated to the gateway CLI and already hold high privileges. The issue is remotely exploitable and does not require user interaction.
2
What is the likely impact if exploitation succeeds?
Successful exploitation allows arbitrary command execution on the underlying operating system. This can result in complete compromise of the affected gateway, including confidentiality, integrity, and availability impacts.