CVE-2026-76687

Katalog CVE

CVSS 7.5 · High EPSS 0,47%

Kerentanan Improper Privilege Management pada arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system. Skor CVSS 3.1 7.5 (High) menurut hpe.com.

Deskripsi (NVD)

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

Rincian

Terbit di NVD

15 September 2026

Terakhir diubah

25 September 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber hpe.com
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US advisory vendor