High severity7.2NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026

CVE-2025-37169

Description

A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Successful exploitation could allow an authenticated malicious actor to execute arbitrary code as a privileged user on the underlying operating system.

Affected products

Mobility Gateway/AOS-10llm-create
HPE/Mobility Gatewayllm-create
Arubanetworks/Arubaos
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
Range: >=10.3.0.0,<10.4.1.10
Hewlett Packard Enterprise (HPE)/ArubaOS (AOS)v5
Range: 10.6.0.0

Patches

Vulnerability mechanics

References

support.hpe.com/hpesc/public/docDisplaynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000