Multiple vulnerabilities have been identified in the REST API interface of HPE Networking SD-WAN Orchestrator. These flaws could allow an unauthenticated remote attacker to bypass web authentication mechanisms and gain unauthorized access to system functions. Successful exploitation may enable attackers to view and modify potentially sensitive information on the affected system. The vulnerabilities are tracked under CVE-2026-63455 and are published via the NVD. HPE has issued a security bulletin providing further details and remediation guidance. The severity is rated High given the unauthenticated remote exploitation potential and the impact on confidentiality and integrity.