EUVD-2026-79220
GHSA-mv2f-h8jq-rq9h
Severity by source
AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Management CLI is network reachable (AV:N) but requires a high-privileged account (PR:H) and a specific non-trivial trigger (AC:H).
Primary rating from Vendor (hpe).
CVSS VectorVendor: hpe
Lifecycle Timeline
1DescriptionCVE.org
A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a vulnerable system.
AnalysisAI
Privilege escalation in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways lets an authenticated, already high-privileged remote user exceed their assigned authorization level and execute arbitrary code on the appliance. Four release branches are affected: 9.4.0.0-9.4.8.2, 9.5.0.0-9.5.8.1, 9.6.0.0-9.6.3.1 and 9.7.0.0. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires an authenticated session in the EdgeConnect SD-WAN Gateway command line interface with an account already holding high privileges - the CVSS vector specifies PR:H and AV:N, so the attacker reaches the CLI remotely over the management plane with valid, credentialed access; PR:H is the key limiting factor, meaning no unauthenticated or low-privilege path is described. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals here are internally consistent but point to a narrower threat than the raw 'privilege escalation plus RCE' framing suggests. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the fixed firmware release for your EdgeConnect SD-WAN Gateway train as published in HPE advisory hpesbnw05135en_us (https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05135en_us&docLocale=en_US); because the vulnerable ranges are branch-specific, upgrade each 9.4.x, 9.5.x, 9.6.x and 9.7.0.0 appliance to the corresponding patched build rather than assuming a jump to the newest train, which may require an interim hop and a config migration. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today