CVE-2025-37162: Arubanetworks Arubaos

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in the command line interface of affected devices could allow an authenticated remote attacker to conduct a command injection attack. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Affected products

• Arubanetworks Arubaos: from 10.7.1.0, before 10.7.2.0 (fixed in 10.7.2.0)

Published 2025-11-18. Last modified 2026-10-08.