Skip to content
OpenAdvisories
High · 8.2 CVE-2025-37168 EUVD-2026-2067GHSA-53h8-w7qc-w9rq

Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System

Published Jan 13, 2026 · Updated Jan 14, 2026 · Assigned by hpe

Description

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 8.12.0.0 – ≤ 8.13.1.0, 8.10.0.0 – ≤ 8.10.0.20 —

Advisories 2

References