CVE-2025-37125: Hewlett Packard Enterprise HPE HPE Aruba Networking Edgeconnect SD-WAN Gateway

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A broken access control vulnerability exists in HPE Aruba Networking EdgeConnect OS (ECOS). Successful exploitation could allow an attacker to bypass firewall protections, potentially leading to unauthorized traffic being handled improperly

Affected products

• Hewlett Packard Enterprise HPE HPE Aruba Networking Edgeconnect SD-WAN Gateway: from 9.5.0.0, up to and including 9.5.3.6; from 9.4.0.0, up to and including 9.4.3.7

Published 2025-09-16. Last modified 2026-06-17.