CVE-2026-76677

Analyzed Analyzed - Analysis Complete

Privilege Escalation in EdgeConnect SD-WAN Gateways

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76677

EUVD

EUVD-2026-79203

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This is a privilege escalation vulnerability in the API of EdgeConnect SD-WAN Gateways. A remote low-privileged authenticated user could exploit it to gain administrative access to the web-management interface, potentially leading to full system compromise.

Detection Guidance

Detecting this vulnerability requires checking for unauthorized administrative access or privilege escalation in EdgeConnect SD-WAN Gateways. Monitor web-management interface logs for unusual administrative actions or access from low-privileged accounts. Inspect API calls for suspicious privilege-related requests. Ensure all systems are updated to the latest firmware versions to mitigate risks.

Impact Analysis

If exploited, an attacker could take complete control of the SD-WAN Gateway, allowing them to modify configurations, access sensitive data, or disrupt network operations. This could lead to data breaches, service disruptions, or unauthorized access to connected systems.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating compliance requirements under GDPR, HIPAA, or other regulations. Organizations may face legal penalties, data breach notifications, and reputational damage if exploited.

Mitigation Strategies

Immediately update EdgeConnect SD-WAN Gateways to the latest patched version provided by HPE. Restrict API access to trusted networks or IP addresses. Monitor web-management interface logs for unusual administrative privilege changes or unauthorized access attempts.

Hi! I’m here to help you understand CVE-2026-76677. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70