Dear Valued Customers and Partners,
As of October 16, 2026, HPE Networking will have released patch updates for Session Smart Router (SSR) and Conductor which includes critical security fixes.
We strongly recommend that all customers upgrade to the appropriate patch release before the associated vulnerabilities are publicly disclosed on October 28, 2026.
As cyber threats continue to evolve, organizations are facing increased scrutiny around infrastructure security, patch management, and vulnerability response. Across the industry, attackers are increasingly targeting network and security platforms soon after vulnerabilities become public. Applying security updates promptly remains one of the most effective ways to reduce exposure and maintain a strong security posture.
SSR and Conductor Version
7.0.5
7.1.7
7.2.3
Releases listed are available for upgrade for Conductor-managed environments, and Mist-managed environments. For air gapped Conductor-managed environments, these versions are available for download from the SSR software repository.
Please pay special attention to upgrade considerations when upgrading Conductor nodes, or Router nodes managed by Conductor, which are running 6.x or older versions. Some environments, such AWS or Azure, do not allow the disk modifications required for certain upgrade paths. Refer to the documentation to understand if your SSR environment is subject to these environment limitations, and for alternate procedures for upgrading to the releases in this advisory.
To ensure you receive future security advisories and product notifications, please subscribe to HPE security updates for SSR here:
Subscribe to HPE Security Updates for SSR
To submit a case:
Support Portal
Thank you for your continued partnership and for helping maintain a secure and resilient network environment.
Best Regards,
HPE Networking Team
N/A
2026-10-16: Initial Publication