CVE-2026-76687

Description

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

Traduire en français

Produits concernés

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
• Arubanetworks edgeconnect sd-wan orchestrator
• Hpe edgeconnect operating system

Scores CVSS

Faiblesses (CWE)

• CWE-269

Références

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US Vendor Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories