Multiple vulnerabilities have been identified in HPE Aruba Networking EdgeConnect SD-WAN Orchestrator, potentially allowing attackers to compromise data confidentiality, integrity, and bypass security policies. Affected systems include versions 9.6.2.x prior to 9.6.2.40210, 9.6.3.x prior to 9.6.3.40140, and 9.7.0.x prior to 9.7.0.43264. The vulnerabilities are detailed in HPE Aruba’s security bulletin HPESBNW05100 (August 4, 2026), with associated CVE identifiers CVE-2026-63455 and CVE-2026-63456. Users are advised to apply patches from the official bulletin to mitigate risks. The CERT-FR advisory, CERTFR-2026-AVI-0969, highlights these issues and provides further documentation for affected systems.
Summary of content from
Made by AI. If you spot anything of concern write us at contact@cybach.com. We’ll promptly correct irregularities.