← Database

CVE-2025-37173

HIGH CVSS: 7.2 Published: 2026-01-13 Modified: 2026-06-17

Description

An improper input handling vulnerability exists in the web-based management interface of mobility conductors running either AOS-10 or AOS-8 operating systems. Successful exploitation could allow an authenticated malicious actor with valid credentials to trigger unintended behavior on the affected system.

Affected Platforms

Arubanetworks Arubaos

Weakness Type

CWE-20

References