Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS) vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS): 2 record(s), with affected versions and fixes.
CVE-2026-44879
High · 7.2
CWE-77 Jul 21, 2026
Authenticated Command Injection allows arbitrary command execution in CLI Interface
A vulnerability in the command line interface of ECOS devices could allow a highly privileged, authenticated remote attacker to perform command injection on certain CLI commands. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
CVE-2026-44878
High · 7.2
CWE-377 Jul 21, 2026
Authenticated Path Traversal allows Unauthorized Access in Web Interface
A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.