Multiple vulnerabilities have been identified in the REST API interface of HPE Networking SD-WAN Orchestrator. An unauthenticated remote attacker could exploit these flaws to bypass web authentication mechanisms and gain access to system functions. Successful exploitation may allow the attacker to view and modify potentially sensitive information on the target system. The vulnerabilities are classified as high severity given the unauthenticated nature of the attack vector and the scope of access granted. HPE has published a security bulletin with further details and remediation guidance. Organizations using HPE Networking SD-WAN Orchestrator should apply patches or mitigations promptly. The vulnerability is tracked under CVE-2026-63456 and is listed in the NVD database.