CVE-2026-76704

HPE EdgeConnect SD-WAN Orchestrator web-based management interface is affected by an authenticated stored XSS vulnerability. An attacker with a valid account can inject malicious script that executes in a victim's browser within the interface context, potentially allowing access to sensitive info...

CVE-2026-76694

A privilege escalation vulnerability in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways allows an authenticated remote attacker with high privileges to escalate beyond their authorized level and execute arbitrary code on the affected system. The CVSS v3.1 score is 6.6 (ME...

EUVD-2026-79220

A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a...

CVE-2026-76694 Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways

A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a...

EUVD-2026-79217

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system...

CVE-2026-76691

Buffer overflow vulnerabilities in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlying operating system, effectively resulting in remote code execution . The CVSS 3.1 score is 7....

EUVD-2026-79216

A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN Gateways that may allow for arbitrary command execution. An authenticated remote attacker could exploit this vulnerability by providing a specially crafted input to the affected component. Successful exploitation could...

CVE-2026-76690

CVE-2026-76690 affects a component of HPE Networking EdgeConnect SD-WAN Gateways , allowing an authenticated remote attacker to achieve remote code execution as root by supplying a specially crafted input. The CVSS 3.1 score is 7.2 (HIGH) , with low attack complexity, no user interaction, and hig...

CVE-2026-76689

CVE-2026-76689 affects HPE Networking EdgeConnect SD-WAN Gateways , where a stack-based buffer overflow exists in the configuration processing logic. An authenticated remote attacker with administrative privileges can exploit the vulnerability by supplying specially crafted configuration data tha...

EUVD-2026-79215

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

EUVD-2026-79213

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges o...

CVE-2026-76687

HPE Networking EdgeConnect SD-WAN Orchestrator is affected by a vulnerability in its API endpoint involving an authenticated arbitrary file write that can lead to remote code execution . A low-privilege authenticated remote attacker can exploit this flaw to escalate privileges and execute arbitra...

EUVD-2026-79211

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...

CVE-2026-76685

CVE-2026-76685 affects HPE Networking EdgeConnect SD-WAN Gateways in the proxy packet processing logic , where improper handling of malformed or truncated input triggers an integer overflow that escalates to a buffer overflow . An unauthenticated remote attacker can send specially crafted input t...

CVE-2026-76683

HPE Networking EdgeConnect SD-WAN Gateways contain buffer overflow vulnerabilities in their API endpoint that allow an unauthenticated remote attacker to execute arbitrary commands on the underlying operating system, leading to complete system compromise . Exploitation requires certain preconditi...

EUVD-2026-79209

Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways that could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outside of the attacker's control are met. Successful exploitation...

EUVD-2026-79208

A vulnerability in the network security monitoring component of intrusion detection systems could allow an unauthenticated remote attacker to exploit a limited buffer overflow. Successful exploitation could allow an attacker to cause a denial-of-service or potentially execute arbitrary code on th...

CVE-2026-76682

CVE-2026-76682 affects HPE Networking EdgeConnect SD-WAN Gateways , specifically the network security monitoring component of its intrusion detection systems. The root cause is a limited buffer overflow that an unauthenticated remote attacker can exploit over the network. Successful exploitation ...

EUVD-2026-79204

A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways could allow a low-privilege authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on th...