CVE-2026-63455

criticalCVSS 9.8covered by 1 sourcefirst seen 2026-08-04

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive information on the target system.

⚡ Watch CVE-2026-63455

Get an email if CVE-2026-63455 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Advisory coverage (1)

criticalCVE-2026-63455: Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could…nvd · 2026-08-04

External references

NVD record for CVE-2026-63455

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2026-63455 status](https://www.csirts.com/badge/CVE-2026-63455)](https://www.csirts.com/cve/CVE-2026-63455)