Vulnerability Details CVE-2026-76677
A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gateways. Successful exploitation could allow a remote low-privileged authenticated user to achieve administrative privilege on the web-management interface leading to complete system compromise.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 43.3%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2026-76677
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.0
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.1
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.2
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.3
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.4.4
-
cpe:2.3:a:arubanetworks:edgeconnect_sd-wan_orchestrator:9.6.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.0.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.5
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.6
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.7
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.8
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.3.9
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.4.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.4.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.4.3
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.5.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.6.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.6.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.6.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.6.3
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.7.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.7.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.7.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.8.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.8.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.4.8.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.0.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.3.5
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.3.6
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.3.7
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.3.8
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.4.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.5.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.5.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.2
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.3
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.4
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.5
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.6.6
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.7.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.7.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.8.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.5.8.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.0.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.1.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.2.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.2.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.3.0
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.6.3.1
-
cpe:2.3:o:hpe:edgeconnect_operating_system:9.7.0.0