Hewlett Packard Enterprise (HPE) has patched a maximum-severity vulnerability in its HPE OneView software that enables attackers to execute arbitrary code remotely.

HPE patches critical RCE flaw (CVE‑2025‑37164) in OneView, severity 10/10Exploitation could allow attackers to reconfigure ...

In HPE's OneView, malicious actors can inject malicious code from the network without authentication. An update is available.

HPE said the issue was reported by security researcher Nguyen Quoc Khanh and is urging customers to either upgrade to OneView 11.0 or apply the emergency hotfix immediately. Separate fixes are ...

Hewlett Packard Enterprise has fixed a critical vulnerability in OneView Software that allows remote code execution. The bug ...

HPE has released patches for a critical-severity OneView vulnerability that could lead to unauthenticated remote code execution.

An unauthenticated user can execute the attack, and there’s no mitigation, just a hotfix that should be applied immediately.