CVE-2026-76670 – HPE EdgeConnect SD-WAN Gateways
“Six critical flaws turn the device that routes your network into the attacker's way in.”
This HPE update fixes six Critical vulnerabilities in EdgeConnect SD-WAN Gateways and the EdgeConnect SD-WAN Orchestrator. Each one can lead to full compromise of the system. CVE-2026-76673 has a CVSS score of 9.8, Critical severity. It lets an unauthenticated remote attacker bypass authentication in the Orchestrator API and take administrative control. CVE-2026-76674 has a CVSS score of 9.8, Critical severity. It is a buffer overflow in the gateway's underlying operating system that lets an unauthenticated remote attacker run arbitrary commands.
CVE-2026-76669 and CVE-2026-76670 each have a CVSS score of 9.9, Critical severity. Both let a low-privileged authenticated user escalate to administrator through the Orchestrator API. CVE-2026-76672 has a CVSS score of 9.9, Critical severity. It lets a read-only user pull third-party API tokens and credentials from the cache synchronization endpoint, which opens a path to external security platforms. CVE-2026-76675 has a CVSS score of 9.1, Critical severity. It is a command injection flaw in the gateway CLI that gives a highly privileged attacker control of the operating system. SD-WAN devices sit at the edge of the network and control traffic between sites, so patch them right away.
Key Details
- Affected Product
- Arubanetworks Edgeconnect Sd-wan Orchestrator
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-269