CVE-2026-63455: Authentication bypass via spoofed HTTP headers Orchestrator REST API
Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive information on the target system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63455?
CVE-2026-63455 has a critical severity rating of 9.8.
How can I fix CVE-2026-63455?
To fix CVE-2026-63455, update to the latest version of HPE Networking SD-WAN Orchestrator as per the vendor's guidance.
What systems are affected by CVE-2026-63455?
CVE-2026-63455 affects the HPE Networking SD-WAN Orchestrator software.
What type of vulnerability is CVE-2026-63455?
CVE-2026-63455 is an authentication bypass vulnerability via spoofed HTTP headers.
What could happen if CVE-2026-63455 is exploited?
Successful exploitation of CVE-2026-63455 could allow unauthorized access to sensitive information and system functions.