CVE-2025-37169: arubanetworks arubaos Out-of-bounds Write

Vulnerability summary

CVE-2025-37169 is a high (CVSS 7.2) Out-of-bounds Write vulnerability in arubanetworks arubaos. EPSS estimates a 0.57% chance of exploitation in the next 30 days, higher than 45.9% of scored vulnerabilities.

Timeline

1. 13-01-2026
   PublishedVulnerability first disclosed.
2. 26-02-2026
   Last modifiedVulnerability information updated.

Description

A stack overflow vulnerability exists in the AOS-10 web-based management interface of a Mobility Gateway. Successful exploitation could allow an authenticated malicious actor to execute arbitrary code as a privileged user on the underlying operating system.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).