CVSS 9.1 (critical) · published 2026-09-15
A command injection vulnerability exists in the command line interface of EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to execute arbitrary commands on the underlying operating system leading to complete system compromise.
Affected products (NVD): arubanetworks edgeconnect_sd-wan_orchestrator, hpe edgeconnect_operating_system
Fixed in (NVD): 9.4.11, 9.5.9, 9.6.4, 9.4.9.0, 9.5.9.0, 9.6.4.0
Weakness: CWE-77
Source: NVD CVE-2026-76675
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.