CVE-2026-76670

This is a flaw that can let a person with an ordinary account become the system administrator. It is like giving a staff keyholder a way to copy the master keys to every room in your business.

This matters to you if you run EdgeConnect SD-WAN Gateways and give users accounts with basic access. An attacker must already have valid credentials for a low-privileged account; no employee action is required after that.

A person who already has a basic account can remotely turn it into full administrator access, making this a red-level issue. There is no confirmed real-world exploitation or public exploit code currently reported, but the potential control over the network management system warrants immediate access review and vendor follow-up.

Confirm whether EdgeConnect SD-WAN Gateways are deployed, identify their management interfaces, and inventory all low-privileged accounts that can authenticate to them. There is no published fixed version or supported upgrade target yet, so obtain the vendor's advisory and upgrade instructions when available rather than assuming a version is safe.

While awaiting a patch, reduce the number of low-privileged accounts, disable accounts that are no longer needed, require strong authentication controls where supported, and limit management access to trusted administrative networks. Review audit records for privilege changes, newly created administrator accounts, configuration changes, and unusual management-interface logins. The vulnerability is not in CISA's Known Exploited Vulnerabilities catalog, so no CISA remediation due date applies.

CVE-2026-76670 is rated CVSS 9.9 Critical (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). It is CWE-269, an improper privilege-management issue: a remote authenticated low-privileged user can bypass authorization checks and gain administrator-level control. No CISA KEV listing, dated exploitation claim, or public exploit code is recorded. EPSS predicts a 0.4% likelihood and is flat (38th percentile); this is a forecast, not evidence of exploitation.