CVE-2026-63456

critical · 9.8

Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to view and modify potentially sensitive information on the target system.

9.8

CVSS

0.4%

EPSS (exploit prob.)

37th

EPSS percentile

2026-08-04

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05100en_us&docLocale=en_US

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-63456