CVE-2026-76694: Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways
A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a vulnerable system.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
An attacker must be able to authenticate remotely to the gateway and already hold high privileges. The vulnerability is not described as exploitable by unauthenticated or low-privileged users.
What could exploitation allow an attacker to do?
Successful exploitation could let the attacker elevate privileges beyond their authorized level and execute arbitrary code on the vulnerable gateway.
Does exploitation require user interaction or local access?
No user interaction is required, and the attack vector is network-based. The attack complexity is rated high.