Skip to content
Sign in
7.7 High

CVE-2025-37100 A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to…

Description

A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing sensitive information.

Affected products and versions

Product Affected versions Fixed in
HPE Aruba Networking Private 5G Core 1.24 1.24.1.0 → 1.25.1.0 No fix stated

Other CVEs of HPE Aruba Networking Private 5G Core

The 5 CVEs of HPE Aruba Networking Private 5G Core →
CVE-2026-23598 Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an… 6.5 Medium CVE-2026-23597 Vulnerabilities in the API error handling of an HPE Aruba Networking 5G Core server API could allow an… 6.5 Medium CVE-2026-23596 A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to… 6.5 Medium CVE-2026-23595 An authentication bypass in the application API allows an unauthorized administrative account to be created 8.8 High
Track this CVE