CVE-2025-37164

A remote code execution issue exists in HPE OneView.

Affected

Hewlett Packard Enterprise (HPE) · HPE OneView

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 HPE

10.0 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

90.19% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2026-01-07

Nuclei

critical

Published

2025-12-16

Updated

2026-02-26

Proof-of-concept exploits (3)

• LACHHAB-Anas/Exploit_CVE-2025-371641★ · 2026-01-06
• g0vguy/CVE-2025-37164-PoC6★ · 2025-12-19
• gigachadusers/hpe-exploit1★ · 2026-09-03

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-37164.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/hpe_oneview_rce.rb

Security advisories

• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US#v…

References

• CVE Record
• NVD entry

Related

• CVE-2026-3854
• CVE-2025-61922
• CVE-2026-20127
• CVE-2026-20169