PT-2026-92431 · Hewlett Packard · Edgeconnect Sd-Wan Orchestrator
CVE-2026-76670
·
Published
2026-09-15
·
Updated
2026-09-25
CVSS v3.1
9.9
Critical
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
HPE Networking EdgeConnect SD-WAN Orchestrator (affected versions not specified)
Description
Privilege escalation flaws exist in the API of the system. A remote low-privileged authenticated user can exploit these authorization bypass issues to elevate their privileges to those of an administrative user, which could lead to complete system compromise.
Recommendations
Apply the available security update for HPE Networking EdgeConnect SD-WAN Orchestrator.
Fix
LPE
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Edgeconnect Sd-Wan Orchestrator