HPE Aruba Flaws Allow Unauthorized Access to Sensitive Data

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HPE Aruba Vulnerabilities Enable Unauthorized Access to Sensitive Information Hewlett Packard Enterprise (HPE) disclosed four high-severity vulnerabilities in its Aruba Networking Instant On devices, allowing unauthorized access to sensitive network information. The vulnerabilities, identified as CVE-2025-37165, CVE-2025-37166, CVE-2023-52340, and CVE-2022-48839, affect devices running software version 3.3.1.0 and earlier. 3 sources 31