Skip to content
OpenAdvisories
High · 7.5 CVE-2025-37165 EUVD-2026-2192GHSA-cr4c-fm7r-g72r

Exposure of VLAN information in unintended network interfaces

Published Jan 13, 2026 · Updated Mar 2, 2026 · Assigned by hpe

Description

A vulnerability in the router mode configuration of HPE Instant On Access Points exposed certain network configuration details to unintended interfaces. A malicious actor could gain knowledge of internal network configuration details through inspecting impacted packets.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Instant On 3.0.0.0 – ≤ 3.3.1.0 —

References