CVE-2025-37183 | HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0 Web-based Management Interface sql injection

January 14, 2026 Yanac

A vulnerability was found in HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0 and classified as critical. This issue affects some unknown processing of the component Web-based Management Interface. Such manipulation leads to sql injection.

This vulnerability is traded as CVE-2025-37183. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More