EdgeConnect SD-WAN Orchestrator vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

ES

Product

EdgeConnect SD-WAN Orchestrator

by Hewlett Packard Enterprise (HPE) · last CVE Aug 4, 2026

7

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 3High 3Medium 1Low 0

Severity

All severities7 Critical3 High3 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add EdgeConnect SD-WAN Orchestrator to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-63456	9.8	1%	Aug 4	Authentication bypass via spoofed HTTP headers Orchestrator REST API Affected: 9.6.2.00000 through 9.6.2.40208; 9.6.3.00000 through 9.6.3.40137
CVE-2026-63455	9.8	1%	Aug 4	Authentication bypass via spoofed HTTP headers Orchestrator REST API Affected: 9.6.2.00000 through 9.6.2.40208; 9.6.3.00000 through 9.6.3.40137
CVE-2025-37184	9.8	1%	Jan 14	Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention Affected: 9.5.0 through 9.6.0; 9.4.0 through 9.4.4
CVE-2025-37181	7.2	0%	Jan 14	Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.5.0 through 9.6.0; 9.4.0 through 9.4.4
CVE-2025-37183	7.2	0%	Jan 14	Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.5.0 through 9.6.0; 9.4.0 through 9.4.4
CVE-2025-37182	7.2	0%	Jan 14	Authenticated SQL Injection in EdgeConnect SD-WAN Orchestrator Web-Based Management Interface Affected: 9.5.0 through 9.6.0; 9.4.0 through 9.4.4
CVE-2025-37185	4.8	0%	Jan 14	Authenticated Stored Cross-Site Scripting Vulnerabilities (XSS) in EdgeConnect SD-WAN Orchestrator Web Administration Interface Affected: 9.5.0 through 9.6.0; 9.4.0 through 9.4.4