CVE-2026-76670Patch(arubanetworks / edgeconnect_operating_system)

LOWCVSS 9.9 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

Patch arubanetworks edgeconnect_operating_system systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConnect SD-WAN Orchestrator. Successful exploitation could allow a remote low-privileged authenticated user to escalate their privileges to those of an administrative user, leading to complete system compromise.

arubanetworks CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US

Weakness type (CWE)

CWE-269

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

edgeconnect_operating_system
edgeconnect_sd-wan_orchestrator

Threat summary

Patch or workaround signal is available
3 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 1 classified signal
3 total mentions across 1 day

Affected systems

Vendors

arubanetworks hpe

Products

edgeconnect_operating_systemedgeconnect_sd-wan_orchestrator

2 versions affected across 2 products

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Patch

266.7%

Disclosure

133.3%

Referenced assets1 URL

By indicator

https://securityonline.info/hpe-edgeconnect-authorization-bypass/

Full discourse3 posts

GovCERT.CZ@GOVCERT_CZ45d
Patch
🚨 Upozorňujeme na kritickou zranitelnost v HPE Networking EdgeConnect SD-WAN Gateways & Orchestrator, CVE-2026-76674. Tato zranitelnost představuje neautentizované přetečení vyrovnávací paměti (buffer overflow), které může vést ke vzdálenému spuštění kódu (RCE) na zařízeních EdgeConnect SD-WAN Gateway. Současně byly zveřejněny i další kritické zranitelnosti (CVE-2026-76669, CVE-2026-76670, CVE-2026-76672, CVE-2026-76673 a CVE-2026-76675) umožňující obejití autentizace a autorizace, eskalaci oprávnění, únik citlivých informací a spouštění příkazů s oprávněními root. Úspěšné zneužití může útočníkovi umožnit převzetí kontroly nad systémem, získání přístupu ke konfiguračním datům a přihlašovacím údajům, provádění SSRF útoků nebo způsobení nedostupnosti služby. Zranitelnosti lze zneužít proti zasaženým instancím EdgeConnect SD-WAN Gateway a Orchestrator a mohou vést až k úplnému kompromitování systému. 📌Doporučené opravené verze jsou ECOS 9.7.1.0, 9.6.4.0, 9.5.9.0 nebo 9.4.9.0 a novější pro Gateway a Orchestrator 9.7.1, 9.6.4, 9.5.9 nebo 9.4.11 a novější pro Orchestrator.
Post summary
The tweet announces a critical buffer overflow (CVE‑2026‑76674) in HPE EdgeConnect SD‑WAN Gateways and Orchestrator, detailing the RCE risk, and advises applying specific patched versions (e.g., ECOS 9.7.1.0, Orchestrator 9.7.1) to remediate.
020501.5K
4.3K followersView on X
ThreatWire@ThreatWire_46d
Patch
🚨 CRITICAL: CVE-2026-76670 affects HPE Networking EdgeConnect SD-WAN Orchestrator. The vulnerability is an authorization/privilege escalation flaw in the API that could allow an attacker to gain elevated privileges on affected systems. ⚠️ Organizations running EdgeConnect should prioritize applying the available security update. #HPE #EdgeConnect #CVE #SDWAN #CyberSecurity #Infosec
Post summary
The text reports a critical authorization/privilege escalation vulnerability in HPE EdgeConnect SD-WAN Orchestrator and urges organizations to apply an available security update. No PoC, exploit tool, active exploitation, or debunking claim is mentioned.
00051917
1.8K followersView on X
Daily CyberSecurity@Daily_CyberSec46d
Disclosure
A critical HPE EdgeConnect authorization bypass (CVE-2026-76670) enables full system compromise. Patch this HPE EdgeConnect authorization bypass now. #HPE #EdgeConnect #AuthorizationBypass #CVE202676670 #Cybersecurity https://securityonline.info/hpe-edgeconnect-authorization-bypass/
Post summary
The text announces a critical HPE EdgeConnect authorization bypass (CVE-2026-76670), provides technical details about its severity, and urges immediate patching but does not specify a named patch, exploit, or active exploitation evidence.
00000393
13.0K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	arubanetworks	edgeconnect_sd-wan_orchestrator	-	-	-
App	arubanetworks	edgeconnect_sd-wan_orchestrator	9.7.0	-	-
OS	hpe	edgeconnect_operating_system	-	-	-
OS	hpe	edgeconnect_operating_system	9.7.0.0	-	-

Explore more

Back to dashboard arubanetworks CVEs hpe CVEs edgeconnect_operating_system vulnerabilities

What researchers are saying

CVE-2026-76670

GovCERT.CZ[verified]@GOVCERT_CZPatch

The tweet announces a critical buffer overflow (CVE‑2026‑76674) in HPE EdgeConnect SD‑WAN Gateways and Orchestrator, detailing the RCE risk, and advises applying specific patched versions (e.g., ECOS 9.7.1.0, Orchestrator 9.7.1) to remediate.

ThreatWire[verified]@ThreatWire_Patch

The text reports a critical authorization/privilege escalation vulnerability in HPE EdgeConnect SD-WAN Orchestrator and urges organizations to apply an available security update. No PoC, exploit tool, active exploitation, or debunking claim is mentioned.

Daily CyberSecurity@Daily_CyberSecDisclosure

The text announces a critical HPE EdgeConnect authorization bypass (CVE-2026-76670), provides technical details about its severity, and urges immediate patching but does not specify a named patch, exploit, or active exploitation evidence.