{"vulnerability": "cve-2026-6345", "sightings": [{"uuid": "b5720efb-8ad0-4096-9af5-35c9e6c7034e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63455", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmqkotdv2u", "content": "CVE-2026-63455 - edgeconnect sd-wan orchestrator\nAn attacker can bypass security checks and access sensitive information on the HPE Networking SD-WAN Orchestrator system. This could happen if an attacker sends fake HTTP\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T18:18:05.273289Z"}, {"uuid": "f2fa7a4f-712b-4b4c-8721-3a07d6b266c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63456", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msbmu3v6f52u", "content": "CVE-2026-63456 - edgeconnect sd-wan orchestrator\nThe HPE SD-WAN Orchestrator's REST API has a security flaw that could allow an attacker to access and modify sensitive information without being authenticated. This means an\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-04T18:20:04.322192Z"}, {"uuid": "d3c13ea4-3c00-476b-8be9-39332f268bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63456", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqavcqi2u", "content": "\ud83d\udd17 CVE : CVE-2026-63455, CVE-2026-63456", "creation_timestamp": "2026-08-05T13:05:20.778036Z"}, {"uuid": "b8026886-1436-46a0-8042-48fafd6b1935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63455", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3msdlqavcqi2u", "content": "\ud83d\udd17 CVE : CVE-2026-63455, CVE-2026-63456", "creation_timestamp": "2026-08-05T13:05:20.730160Z"}, {"uuid": "99fe1f14-9351-487a-9297-2ba02406db13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63455", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msxuomlsu72u", "content": "CVE-2026-63455 and CVE-2026-63456 let attackers bypass web authentication on HPE EdgeConnect Orchestrator. CVSS 9.8. Patch now.\n\n#HPE #Aruba #SDWAN #CVE #CyberSecurity", "creation_timestamp": "2026-08-13T14:38:45.227137Z"}, {"uuid": "a670e167-d27d-45c1-845e-eb17bdc9b470", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63456", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3msxuomlsu72u", "content": "CVE-2026-63455 and CVE-2026-63456 let attackers bypass web authentication on HPE EdgeConnect Orchestrator. CVSS 9.8. Patch now.\n\n#HPE #Aruba #SDWAN #CVE #CyberSecurity", "creation_timestamp": "2026-08-13T14:38:45.287255Z"}, {"uuid": "c64b7193-1345-4f5f-a095-ec9b2a86b6e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63455", "type": "seen", "source": "https://infosec.exchange/ap/users/116797276219291526/statuses/117088710654375006", "content": "CVE-2026-63455 and CVE-2026-63456 let attackers bypass web authentication on HPE EdgeConnect Orchestrator. CVSS 9.8. Patch now.\n#HPE #Aruba #SDWAN #CVE #CyberSecurity\nhttps://securityonline.info/edgeconnect-orchestrator-auth-bypass/?utm_source=mastodon&utm_medium=jetpack_social", "creation_timestamp": "2026-08-13T17:52:57.722438Z"}, {"uuid": "b63ebea6-03f6-4f6a-93b8-245884d675f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63456", "type": "seen", "source": "https://infosec.exchange/ap/users/116797276219291526/statuses/117088710654375006", "content": "CVE-2026-63455 and CVE-2026-63456 let attackers bypass web authentication on HPE EdgeConnect Orchestrator. CVSS 9.8. Patch now.\n#HPE #Aruba #SDWAN #CVE #CyberSecurity\nhttps://securityonline.info/edgeconnect-orchestrator-auth-bypass/?utm_source=mastodon&utm_medium=jetpack_social", "creation_timestamp": "2026-08-13T17:52:57.793927Z"}, {"uuid": "af096852-677e-41d1-b355-0c8e2ffe2fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63453", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mraldxwopq2n", "content": "\ud83d\udd17 CVE : CVE-2026-35387, CVE-2026-44878, CVE-2026-44879, CVE-2026-44880, CVE-2026-48020, CVE-2026-63453, CVE-2026-63454", "creation_timestamp": "2026-07-22T14:55:18.287348Z"}, {"uuid": "eadd9582-e028-486c-be66-11b0de3ff258", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63454", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mraldxwopq2n", "content": "\ud83d\udd17 CVE : CVE-2026-35387, CVE-2026-44878, CVE-2026-44879, CVE-2026-44880, CVE-2026-48020, CVE-2026-63453, CVE-2026-63454", "creation_timestamp": "2026-07-22T14:55:18.336256Z"}, {"uuid": "4ca8fed6-ebb1-43a5-82f3-b3b9aa19ea9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-63459", "type": "published-proof-of-concept", "source": "https://github.com/vendurehq/vendure/security/advisories/GHSA-xhq9-whgq-49j5", "content": "", "creation_timestamp": "2026-09-17T16:35:14.947797Z"}, {"uuid": "7e8b91c8-7b8b-43bc-9781-ceeef49c8b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63452", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt6dtdzds23", "content": "\ud83d\udfe0 CVE-2026-63452 - High (7.5)\n\nSuricata is a network Intrusion Detection System, Intrusion Prevention System and Network Securit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63452/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T22:03:57.085054Z"}, {"uuid": "2c8b69cf-ba53-477d-b2a0-d87b7bcd5b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63458", "type": "seen", "source": "https://gist.github.com/alon710/0b31ec47bc74ca943ea96e388e1d1f47", "content": "# CVE-2026-63458: CVE-2026-63458: Broken Object Level Authorization (BOLA) and Tenant Isolation Bypass in Perses\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-09-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-63458\n\n## Summary\nAn authorization bypass and tenant isolation vulnerability in Perses prior to version 0.54.0-beta.3 allows authenticated viewers to access unauthorized project resources by manipulating query parameters or querying unmapped ephemeral endpoints.\n\n## TL;DR\nAuthenticated users with viewer access can bypass tenant boundaries and view configurations of unauthorized projects due to inconsistent parameter evaluation in Perses backend services.\n\n## Technical Details\n\n- **CWE ID**: CWE-639\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.1\n- **EPSS Score**: 0.0\n- **Impact**: Confidentiality High (VC:H)\n- **Exploit Status**: none\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Perses Observability Platform\n- **perses**: < 0.54.0-beta.3 (Fixed in: `0.54.0-beta.3`)\n\n## Mitigation\n\n- Upgrade to version 0.54.0-beta.3 or later\n- Deploy WAF rules to detect and drop mismatched path/query parameters\n- Monitor application logs for HTTP 400 validation failures\n\n**Remediation Steps:**\n1. Identify all deployed Perses instances running versions older than 0.54.0-beta.3\n2. Apply the patch by updating the container image or application binary to version 0.54.0-beta.3\n3. Verify access controls by attempting a cross-project query using an authorized account\n4. Review access logs for occurrences of mismatched 'project' values\n\n## References\n\n- [Official GitHub Security Advisory](https://github.com/perses/perses/security/advisories/GHSA-cjgj-2fwf-4c2w)\n- [Remediation Fix Commit](https://github.com/perses/perses/commit/8015fb340bdc625953e73a7a688be5b939159540)\n- [Release Tag Details](https://github.com/perses/perses/releases/tag/v0.54.0-beta.3)\n- [NVD Vulnerability Record](https://nvd.nist.gov/vuln/detail/CVE-2026-63458)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-63458)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-63458) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-19T06:32:20.319078Z"}, {"uuid": "5a60c209-d982-4efd-b221-c561543f17d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63452", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117335418688469344", "content": "CVE-2026-63452 Suricata DoS: brotli compression bombs exhaust the HTTP/1 parser, degrading packet processing. CVSS 7.5, no patch yet. Update immediately. https://www.valtersit.com/cve/CVE-2026-63452/ #CVE #infosec #Suricata", "creation_timestamp": "2026-09-26T04:21:48.931835Z"}, {"uuid": "f836177f-a8a7-4e7d-a109-c60312669a45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63452", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwfh6rm54p2f", "content": "CVE-2026-63452 Suricata DoS: brotli compression bombs exhaust the HTTP/1 parser, degrading packet processing. CVSS 7.5, no patch yet. Update immediately. https://www.valtersit.com/cve/CVE-2026-63452/ #CVE #infosec #Suricata", "creation_timestamp": "2026-09-26T04:30:06.112573Z"}, {"uuid": "330bd335-d02f-4a1f-b148-e998fff70f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63450", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117339272930836567", "content": "CVE-2026-63450 Suricata FTP parser: pre-negotiation RETR/STOR kills parsing for the TCP flow, letting later commands evade parser-dependent rules and logging. CVSS 3.7, unpatched. Update to 8.0.6 now. https://www.valtersit.com/cve/CVE-2026-63450/ #CVE #infosec #Suricata", "creation_timestamp": "2026-09-26T20:40:20.194576Z"}, {"uuid": "e0268029-e618-4e25-88e2-c9aa1b61ac33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63450", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mwh6j74oqa25", "content": "CVE-2026-63450 Suricata FTP parser: pre-negotiation RETR/STOR kills parsing for the TCP flow, letting later commands evade parser-dependent rules and logging. CVSS 3.7, unpatched. Update to 8.0.6 now. https://www.valtersit.com/cve/CVE-2026-63450/ #CVE #infosec #Suricata", "creation_timestamp": "2026-09-26T21:00:11.218782Z"}, {"uuid": "fc53cd99-3a1c-4640-8cb6-992b7bec3ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63457", "type": "seen", "source": "https://bsky.app/profile/nvnb.misskey.io.ap.brid.gy/post/3mx43l7nuthj2", "content": "\u3010JVN iPedia\u3011\u30b5\u30fc\u30d0\u88fd\u54c1\u306b\u304a\u3051\u308biLO\u306e\u8106\u5f31\u6027(CVE-2026-63457)\u306b\u3088\u308b\u5f71\u97ff\u306b\u3064\u3044\u3066\nhttps://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-036532.html\n\nNVNB\u306f\u8106\u5f31\u6027\u60c5\u5831\u306e\u95b2\u89a7\u3092\u652f\u63f4\u3059\u308b\u30b5\u30fc\u30d3\u30b9\u3067\u3059\nhttps://nvnb.blossomsarchive.com/", "creation_timestamp": "2026-10-05T04:33:32.521409Z"}]}