Several vulnerabilities (CVE-2026-63455, CVE-2026-63456) have been discovered in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator product of Hewlett Packard Enterprise company. A remote attacker could exploit these vulnerabilities to trigger security restriction bypass and sensitive information disclosure on the targeted system. The vulnerabilities were addressed in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator 9.6.2.40210, 9.6.3.40140, and 9.7.0.43264 versions.

More information on vulnerabilities and updates is available in security bulletin – hpe.com.