Theregister

RondoDox Botnet Exploits HPE OneView Vulnerability

First seen 16 Jan 2026, 16:54 UTC • Theregister

•69.0

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

The RondoDox botnet is exploiting a critical vulnerability in HPE OneView, identified as CVE-2025-37164, which allows for remote code execution. Check Point has reported large-scale automated attacks leveraging this maximum-severity flaw in HPE's data center management platform, affecting various devices including routers and web servers.

How this analysis works

Attack Flow

Continue Reading

RondoDox Botnet Targets React2Shell Flaw to Spread Malware PowMix Botnet Targets Czech Organizations with Malicious LNK Files RondoDox Botnet Expands by Exploiting Unpatched XWiki RCE Vulnerability RondoDox Botnet Grows, Exploiting 174 Vulnerabilities via Residential IPs RondoDox Botnet Expands by Exploiting Unpatched XWiki RCE Flaw RondoDox Botnet Launches Attacks Exploiting HPE OneView Vulnerability

RondoDox Botnet Exploits HPE OneView Vulnerability

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading