CVE-2025-37182 | HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0 Web-based Management Interface sql injection

January 14, 2026 Yanac

A vulnerability has been found in HPE EdgeConnect SD-WAN Orchestrator up to 9.4.4/9.6.0 and classified as critical. This vulnerability affects unknown code of the component Web-based Management Interface. This manipulation causes sql injection.

This vulnerability appears as CVE-2025-37182. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More