CVE-2025-37169

High CVSS: 7.2

A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Successful exploitation could allow an authenticated malicious actor to execute arbitrary code as a privileged user on the underlying operating system.

Vendor

Arubanetworks

Product

Arubaos

CWE

CWE-787

Yayın Tarihi

2026-01-13 20:16:04

Güncelleme

2026-02-25 19:43:16

Source Identifier

security-alert@hpe.com

KEV Date Added

Kategoriler

CWE-787 Arubaos HIGH Arubanetworks 2026

Referanslar

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04987en_us&docLocale=en_US

Benzer Kayıtlar

Medium

CVE-2026-23810

A vulnerability in the packet processing logic may allow an authenticated attacker to craft and transmit a malicious Wi-…

Medium

CVE-2026-23811

A vulnerability in the client isolation mechanism may allow an attacker to bypass Layer 2 (L2) communication restriction…

Medium

CVE-2026-23812

A vulnerability has been identified where an attacker connecting to an access point as a standard wired or wireless clie…

Medium

CVE-2026-23601

A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions. A malicious actor can ge…

Medium

CVE-2026-23808

A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to i…

Medium

CVE-2026-23809

A technique has been identified that adapts a known port-stealing method to Wi-Fi environments that use multiple BSSIDs.…