CVE-2025-37123: Hewlett Packard Enterprise HPE HPE Aruba Networking Edgeconnect SD-WAN Gateway

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

A vulnerability in the command-line interface of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to escalate privileges. Successful exploitation of this vulnerability may enable the attacker to execute arbitrary system commands with root privileges on the underlying operating system.

Affected products

• Hewlett Packard Enterprise HPE HPE Aruba Networking Edgeconnect SD-WAN Gateway: from 9.5.0.0, up to and including 9.5.3.6; from 9.4.0.0, up to and including 9.4.3.7

Published 2025-09-16. Last modified 2026-06-17.