CVE-2025-37181 | HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0 Web-based Management Interface sql injection

January 14, 2026 Yanac

A vulnerability, which was classified as critical, was found in HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0. This affects an unknown part of the component Web-based Management Interface. The manipulation results in sql injection.

This vulnerability is reported as CVE-2025-37181. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More