CVSS 9.9 (critical) · published 2026-09-15
Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.
Affected products (NVD): arubanetworks edgeconnect_sd-wan_orchestrator, hpe edgeconnect_operating_system
Fixed in (NVD): 9.4.11, 9.5.9, 9.6.4, 9.4.9.0, 9.5.9.0, 9.6.4.0
Weakness: CWE-269
Source: NVD CVE-2026-76670
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.