CVE-2026-76698

Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways (affected versions not specified)

Description A command injection flaw exists in the web-based management interface. An authenticated remote attacker with limited access privileges can exploit this by providing specially crafted input, potentially leading to the execution of arbitrary commands with elevated privileges or causing a denial-of-service condition on the appliance. Command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.