CVE-2026-76669
critical · 9.9Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
9.9
CVSS
0.5%
EPSS (exploit prob.)
43rd
EPSS percentile
2026-09-15
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-269
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.4.0, < 9.4.11 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.5.0, < 9.5.9 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | >= 9.6.0, < 9.6.4 |
| arubanetworks | edgeconnect_sd-wan_orchestrator | 9.7.0 |
| hpe | edgeconnect_operating_system | >= 9.4.0.0, < 9.4.9.0 |
| hpe | edgeconnect_operating_system | >= 9.5.0.0, < 9.5.9.0 |
| hpe | edgeconnect_operating_system | >= 9.6.0.0, < 9.6.4.0 |
| hpe | edgeconnect_operating_system | 9.7.0.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-76669