Skip to content
OpenAdvisories
High · 7.2 CVE-2025-37174 EUVD-2026-2058GHSA-h534-5rp5-qc2h

Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface

Published Jan 13, 2026 · Updated Feb 26, 2026 · Assigned by hpe

Description

Authenticated arbitrary file write vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor to create or modify arbitrary files and execute arbitrary commands as a privileged user on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) ArubaOS (AOS) 10.6.0.0 – ≤ 10.7.2.1, 10.3.0.0 – ≤ 10.4.1.9, 8.12.0.0 – ≤ 8.13.1.0, 8.10.0.0 – ≤ 8.10.0.20 —

Advisories 2

References