CVE-2026-76677: Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways
Published Sep 15, 2026
·Updated
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
Affected Software
1 affected component
HPE Networking EdgeConnect SD-WAN Gateways
Event History
Sep 15, 2026
CVE Published
via MITRE·07:23 PM
Data Sourced
via MITRE·07:23 PM
DescriptionSeverity
Frequently Asked Questions
1
Who can exploit this issue?
A remote attacker with a low-privileged authenticated account on an affected EdgeConnect SD-WAN Gateway can exploit the vulnerable API.
2
What level of access could an attacker gain?
Successful exploitation can elevate the attacker to administrative privileges on the web-management interface, potentially resulting in complete system compromise.
3
Is unauthenticated exploitation possible?
The provided information describes exploitation by an authenticated low-privileged user; it does not indicate that unauthenticated attackers can exploit the issue.