CVE-2025-37184General(arubanetworks / edgeconnect_sd-wan_orchestrator)

Sale of a 1‑day exploit in HPE Aruba Networking EdgeConnect SD‑WAN Orchestrator (CVE‑2025‑37184 -> (https://nvd.nist.gov/vuln/detail/CVE-2025-37184)) PT ID: PT-2026-2914 For informational purposes only. According to the seller, the exploit enables creation of an administrative account without MFA and grants full control over the system. Vulnerability type: authentication bypass Affected OS versions: • 9.2.0–9.2.10 • 9.3.0–9.3.5 • 9.4.0–9.4.2 • 9.5.0–9.5.5 • 9.6.0 Privileges obtained: admin #dbugs_darkweb

‼️𝗔𝗹𝗹𝗲𝗴𝗲𝗱 𝗦𝗮𝗹𝗲 𝗼𝗳 𝗛𝗣𝗘 𝗔𝗿𝘂𝗯𝗮 𝗖𝗩𝗘-𝟮𝟬𝟮𝟱-𝟯𝟳𝟭𝟴𝟰 𝗘𝘅𝗽𝗹𝗼𝗶𝘁 A threat actor claims to be selling an exploit targeting CVE-2025-37184, a critical vulnerability affecting HPE Aruba Networking EdgeConnect SD-WAN Orchestrator systems. According to the post, the alleged exploit enables unauthenticated attackers to bypass multi-factor authentication (MFA) protections and create administrator-level accounts on vulnerable systems. If authentic and successfully exploited, such a vulnerability could provide attackers with elevated access to affected network management environments, potentially enabling unauthorized administrative actions and broader compromise of enterprise infrastructure. Organizations using affected HPE Aruba products should ensure that available security updates, mitigations, and vendor guidance are reviewed and applied where appropriate. The functionality, effectiveness, and availability of the advertised exploit have not been independently verified. #CyberSecurity #HPE #Aruba #CVE202537184 #Vulnerability #ThreatIntel #NetworkSecurity