Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-76698

EdgeConnect SD-WAN Gateways · command injection

CVSS 3.1 6.5 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-76698

Published

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain conditions, could result in the execution of arbitrary commands with elevated privileges or a denial-of-service condition on the affected appliance.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-76698

Published

EdgeConnect SD-WAN Gateways

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "defaultStatus": "affected",
                    "product": "EdgeConnect SD-WAN Gateways",
                    "vendor": "Hewlett Packard Enterprise (HPE)",
                    "versions": [
                        {
                            "lessThanOrEqual": "9.7.0.0",
                            "status": "affected",
                            "version": "9.7.0.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThanOrEqual": "9.6.3.1",
                            "status": "affected",
                            "version": "9.6.0.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThanOrEqual": "9.5.8.1",
                            "status": "affected",
                            "version": "9.5.0.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThanOrEqual": "9.4.8.2",
                            "status": "affected",
                            "version": "9.4.0.0",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON