CVE-2026-76698

Analyzed Analyzed - Analysis Complete

Command Injection in HPE Networking EdgeConnect SD-WAN Gateway

Publication date: 2026-09-15

Last updated on: 2026-09-28

Assigner: Hewlett Packard Enterprise (HPE)

Description

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain conditions, could result in the execution of arbitrary commands with elevated privileges or a denial-of-service condition on the affected appliance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-28

Generated

2026-10-06

AI Q&A

2026-09-16

EPSS Evaluated

2026-10-04

NVD

CVE-2026-76698

EUVD

EUVD-2026-79224

Affected Vendors & Products

Vendor	Product	Version / Range
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.4.0 (inc) to 9.4.11 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.5.0 (inc) to 9.5.9 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	From 9.6.0 (inc) to 9.6.4 (exc)
arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0
hpe	edgeconnect_operating_system	From 9.4.0.0 (inc) to 9.4.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.5.0.0 (inc) to 9.5.9.0 (exc)
hpe	edgeconnect_operating_system	From 9.6.0.0 (inc) to 9.6.4.0 (exc)
hpe	edgeconnect_operating_system	9.7.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-77	The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

Executive Summary

This is a command injection vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited privileges could exploit it by sending specially crafted input. If successful, it could allow arbitrary command execution with higher privileges or cause a denial-of-service on the device.

Detection Guidance

Detection requires checking for vulnerable HPE Networking EdgeConnect SD-WAN Gateway versions. Inspect system logs for unusual command execution patterns or unauthorized access attempts. Verify if authenticated users have limited privileges as required. No specific commands are provided in the available context.

Impact Analysis

An attacker could take control of the affected SD-WAN Gateway, execute unauthorized commands, or crash the system. This may disrupt network operations, lead to data breaches, or allow further attacks within the network.

Compliance Impact

This vulnerability could potentially impact compliance with standards like GDPR and HIPAA by allowing unauthorized command execution or denial-of-service on critical network infrastructure. Unauthorized access or disruption of SD-WAN gateways may lead to data breaches or service interruptions, which are key concerns under these regulations.

Mitigation Strategies

Apply the latest security patches or updates provided by HPE for the EdgeConnect SD-WAN Gateways. Restrict access to the web-based management interface to trusted users only. Monitor network traffic for unusual activity and disable unnecessary services.

Hi! I’m here to help you understand CVE-2026-76698. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70