Back to overview

CVE-2026-44878

HIGH
7.2
CVSS 3.1
Description
A vulnerability in the web-based management interface of an ECOS device could allow a highly privileged, authenticated remote attacker to access the device's filesystem. Successful exploitation of this vulnerability could allow an attacker to access sensitive files and tamper with or delete system data.

Metadata

CVE ID
CVE-2026-44878
State
PUBLISHED
Assigner
hpe
Reserved
2026-05-07 21:29 UTC
Published
2026-07-21 20:42 UTC
Last updated
2026-07-21 20:42 UTC
Vendor / Product
Hewlett Packard Enterprise (HPE) / EdgeConnect SD-WAN Gateway (ECOS)
Sources
cve.org  ·  NVD

Severity & Metrics

7.2 HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products (1)
VendorProductPlatformVersions
Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateway (ECOS) — 9.4.0.0 ≤ 9.4.6.0, 9.5.0.0 ≤ 9.5.6.0, 9.6.0.0 ≤ 9.6.1.0
CVSS scores (1)
ScoreSeverityVersionSourceVector
7.2 HIGH 3.1 cna CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References (1)
Back to overview