Executive brief
HPE EdgeConnect SD-WAN Gateways are appliances used to manage and optimize wide-area network connectivity for enterprise branches and data centers. A vulnerability in the gateway's API endpoint allows authenticated users with low-level access to escalate their privileges to root, potentially enabling them to execute arbitrary commands and gain complete control of the device. This threatens the integrity and availability of network infrastructure and could allow attackers to intercept, manipulate, or disrupt branch-to-data-center traffic.
Technical details
The vulnerability is a privilege escalation flaw in the API endpoint of HPE EdgeConnect SD-WAN Gateways. It requires an authenticated low-privilege user with network access to the API to exploit. By sending a crafted API request, an attacker can escalate their privileges to root, achieving arbitrary command execution on the underlying operating system. The vulnerability has been assigned CVE-2026-76678 with a CVSS score of 8.8 (high severity). Patch availability and detailed remediation steps are available from HPE support documentation.
Affected products
- HPE EdgeConnect SD-WAN Gateway
Timeline
- 2026-09-15: disclosed