CVE-2025-37161: Arubanetworks Arubaos

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability in the web-based management interface of affected products could allow an unauthenticated remote attacker to cause a denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network operations.

Affected products

• Arubanetworks Arubaos: from 10.7.1.0, before 10.7.2.0 (fixed in 10.7.2.0)

Published 2025-11-18. Last modified 2026-10-08.