Loading story…
Hewlett Packard Enterprise released bulletin HPESBNW05135 rev.1 to remediate dozens of vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways and EdgeConnect SD-WAN Orchestrator. Five critical issues, CVE-2026-76669 through CVE-2026-76674, carry CVSS scores of 9.8–9.9 and include authentication and authorization bypasses, information disclosure, and an unauthenticated buffer-overflow remote-code-execution flaw. An attacker could gain administrator or root-level access, steal third-party API credentials, execute arbitrary commands, disrupt services, and fully compromise gateway appliances or Orchestrator hosts.
HPE has issued fixed ECOS and Orchestrator releases and urged customers to upgrade promptly. Organizations should isolate management interfaces, restrict access with Layer 3 firewall rules, and monitor administrative activity while updates are deployed. HPE reported no known public exploit code or active exploitation when the bulletin was published; the Canadian Centre for Cyber Security and Guyana National CIRT also advised affected administrators to review HPE’s guidance and apply the required updates.
Map this exposure pattern across your cloud, code, and identities.
2 events from the most recent confirmed update back to the earliest known activity.
The Canadian Centre for Cyber Security issued advisory AV26-928 referencing HPE bulletin HPESBNW05135 and advised users and administrators to review HPE's guidance and apply necessary updates.
HPE published security bulletin HPESBNW05135 revision 1 addressing dozens of vulnerabilities in EdgeConnect SD-WAN Gateways and Orchestrator, including CVE-2026-76669 through CVE-2026-76674. The bulletin provided fixed ECOS and Orchestrator releases; the most severe flaws could enable privilege escalation, credential disclosure, authentication bypass, or remote code execution, and HPE reported no known public exploit code or active exploitation.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See where this exposure pattern shows up across your cloud, code, supply chain, and non-human identities.
4 references tracked. Mallory keeps watching after this page renders.
cirt.gy
Open sourcecyber.gc.ca
Open sourcecryptika.com
Open sourcecybersecuritynews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Hewlett Packard Enterprise disclosed multiple high-severity vulnerabilities in **HPE EdgeConnect SD-WAN Orchestrator** that can let an unauthenticated remote attacker bypass web authentication by spoofing HTTP headers in the product's REST API. The issues, tracked as **`CVE-2026-63455`** and **`CVE-2026-63456`**, could expose system functions and allow viewing or modification of sensitive information, with potential impact to confidentiality, integrity, and availability. Both CVEs carry a **CVSS v3.1** rating of **`AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`**. Affected releases include **9.6.2.00000 through 9.6.2.40208** and **9.6.3.00000 through 9.6.3.40137**, which Canadian Centre for Cyber Security guidance summarized as **9.6.2.40208 and earlier** and **9.6.3.40137 and earlier**. HPE's bulletin **`HPESBNW05100 rev.1`** and related government advisories urge administrators to review the vendor guidance and apply updates as they become available to reduce exposure in internet-reachable orchestration environments.
Aug 5, 2026
Hewlett Packard Enterprise released security updates for **HPE Networking Instant On Access Points** to fix two vulnerabilities affecting firmware version `3.2.0.1` and earlier. The most severe issue, **`CVE-2025-37103`**, is a critical hard-coded credentials flaw with a **CVSS score of 9.8** that could allow a remote attacker to gain administrative access to the device web interface. HPE documented the issues in security bulletin **`HPESBNW04894`** and urged customers to update affected systems. HPE also patched **`CVE-2025-37102`**, a high-severity vulnerability with a **CVSS score of 7.2** that allows a remote authenticated attacker to inject arbitrary commands into the device console and execute commands on the underlying system. The company recommended immediate upgrades to firmware version `3.2.1.0` or later to reduce the risk of unauthorized access and command execution on exposed access points.
Jul 24, 2026
HPE issued security advisories covering multiple vulnerabilities in **HPE Telco Network Function Virtualization Orchestrator** and **HPE Aruba Networking ArubaOS-CX Switches**, including critical issues affecting Telco NFV Orchestrator `7.6.0` and earlier. The ArubaOS-CX advisories affect several software branches, including `10.16.1000` and earlier, `10.15.0005` and earlier, and `10.13.1080` and earlier, prompting guidance for customers to review vendor bulletins and deploy updates. The disclosures also include bulletin **`HPESBNW05062 rev.1`**, which addresses the status of the **OpenSSH Keystroke Obfuscation Bypass** vulnerability, tracked as **`CVE-2024-39894`**, on ArubaOS-CX. Canada’s Centre for Cyber Security echoed the HPE notice and urged administrators to consult the linked advisories and apply the recommended remediations to affected networking and orchestration platforms.
Jun 29, 2026