CVE-2025-37100: Hewlett Packard Enterprise HPE HPE Aruba Networking Private 5g Core

High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing sensitive information.

Affected products

• Hewlett Packard Enterprise HPE HPE Aruba Networking Private 5g Core: from 1.24.1.0, up to and including 1.25.1.0

Published 2025-06-10. Last modified 2026-06-17.