CVE-2026-76690: Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
Published Sep 15, 2026
·Updated
A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could result in remote code execution as root.
Affected Software
1 affected component
HPE Networking EdgeConnect SD-WAN Gateways
Event History
Sep 15, 2026
CVE Published
via MITRE·07:23 PM
Data Sourced
via MITRE·07:23 PM
DescriptionSeverity
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
An attacker must be authenticated to the affected gateway and able to send a specially crafted input to the vulnerable component. The provided data does not identify which authentication roles or privileges are sufficient.
2
What is the impact if exploitation succeeds?
Successful exploitation can allow arbitrary command execution on the affected gateway as root. This could compromise the confidentiality, integrity, and availability of the device.