HPE OneView Software Vulnerability Enables Remote Code Execution

Hewlett Packard Enterprise (HPE) has addressed a critical vulnerability in its OneView software, identified as CVE-2025-37164, which allows attackers to execute arbitrary code remotely without authentication. This flaw affects HPE's infrastructure management software, which is used for managing servers, storage, and networking devices. The vulnerability was reported by Vietnamese security researcher Nguyen Quoc Khanh.