CVE-2026-76698: Authenticated Command Injection Vulnerability leads to Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways
A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain conditions, could result in the execution of arbitrary commands with elevated privileges or a denial-of-service condition on the affected appliance.
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
An attacker must be able to authenticate to the web-based management interface with limited access privileges. The attack can be conducted remotely and does not require user interaction.
What is the likely operational impact if exploitation succeeds?
Successful exploitation may allow arbitrary commands to run with elevated privileges under certain conditions. It can also cause a denial-of-service condition on the affected gateway.