Skip to content
OpenAdvisories
High · 7.2 CVE-2026-76690 EUVD-2026-79216GHSA-m776-qmcg-9869

Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways

Published Sep 15, 2026 · Updated Sep 22, 2026 · Assigned by hpe

Vendor: Hewlett Packard Enterprise (HPE) Product: EdgeConnect SD-WAN Gateways

Description

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could result in remote code execution as root.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways 9.7.0.0 – ≤ 9.7.0.0, 9.6.0.0 – ≤ 9.6.3.1, 9.5.0.0 – ≤ 9.5.8.1, 9.4.0.0 – ≤ 9.4.8.2 —

Advisories 1

References