SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-76698

MEDIUM · CVSS 6.5 EPSS 4.11% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A command injection vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways allows authenticated remote attackers with limited access to execute arbitrary commands or cause a denial-of-service condition through specially crafted input. Organizations using these gateways should prioritize patching this vulnerability to mitigate the risk of unauthorized command execution and potential service disruptions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-76698
Severity
MEDIUM
CVSS
6.5
EPSS
4.11%

Original NVD Description

A command injection vulnerability exists in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways. An authenticated remote attacker with limited access privileges could exploit this vulnerability through specially crafted input. Successful exploitation, under certain conditions, could result in the execution of arbitrary commands with elevated privileges or a denial-of-service condition on the affected appliance.