CVE-2026-76690 is a vulnerability in a component of HPE Networking EdgeConnect SD-WAN Gateways that permits arbitrary command execution. An attacker with valid authentication can exploit this flaw by providing specially crafted input to the affected component, resulting in remote code execution with root privileges. The CVSS v3.1 base score is 7.2, reflecting network attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an authenticated remote attacker to execute arbitrary commands as root on the affected device, potentially leading to full system compromise and disruption of SD-WAN gateway operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the management interfaces to trusted administrators and monitor for suspicious activity. Do not assume the vulnerability is mitigated without vendor confirmation.