Back Feeds2.Feedburner

Recently fixed HPE OneView flaw is being exploited (CVE-2025-37164)

Feeds2.Feedburner •Zeljka Zorz • January 8, 2026

An unauthenticated remote code execution vulnerability (CVE-2025-37164) affecting certain versions of HPE OneView is being leveraged by attackers, CISA confirmed by adding the flaw to its Known Exploited Vulnerabilities catalog. The vulnerability’s inclusion in the catalog is unsurprising, as technical details and a Metasploit module were made public soon after it was disclosed, making exploitation by less-skilled attackers easier. HPE OneView and CVE-2025-37164 HPE OneView is a centralized infrastructure management platform used to deploy, … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Flags Critical HPE OneView Vulnerability as Actively Exploited The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has identified a critical vulnerability in HPE OneView, tracked as CVE-2025-37164, as being actively exploited in attacks. This flaw affects HPE's infrastructure management software, which is used by IT administrators for managing storage, servers, and networking devices. The vulnerability was reported by Vietnamese security researcher Nguyen Quoc Khanh, leading to the release of security patches by HPE in mid-December 2025. 19 sources 54

Extracted Entities

Recently fixed HPE OneView flaw is being exploited (CVE-2025-37164)

The full story

Extracted Entities

CVEs (1)

Platforms (1)

Tools (1)