CVE-2026-76670
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
- Score
- CVSS 3.1 9.9 Critical
- Status
- Analyzed - security-alert@hpe.com
- Published
- 2026-09-15
- Last modified
- 2026-09-21
- Weaknesses
- CWE-269
Affected products
- Edgeconnect Sd-wan Orchestrator (Arubanetworks)
- Edgeconnect Sd-wan Gateways (Hewlett Packard Enterprise Hpe)
- Edgeconnect Operating System (Hpe)
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US
