sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2025-37184 Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention

Critical 9.8 Published Updated

Unauthenticated attackers can bypass MFA to create admin accounts, compromising system integrity in HPE EdgeConnect SD-WAN Orchestrator.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2025-37184?

CVE-2025-37184 is a critical authentication bypass vulnerability in Arubanetworks Edgeconnect Sd-Wan Orchestrator, published on 14 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability exists in an Orchestrator service that could allow an unauthenticated remote attacker to bypass multi-factor authentication requirements. Successful exploitation could allow an attacker to create an admin user account without the necessary multi-factor authentication, thereby compromising the integrity of secured access to the system.

Weakness: CWE-287

Which versions are affected by CVE-2025-37184?

It affects 1 product.

Products include Arubanetworks Edgeconnect Sd-Wan Orchestrator.

How do I fix CVE-2025-37184?

No fix has been published for CVE-2025-37184 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-37184 being exploited?

There is no known exploitation of CVE-2025-37184 in the wild and no public exploit code.

All Arubanetworks Edgeconnect Sd-Wan Orchestrator vulnerabilities

Sources

Also known as GHSA-h5h2-7jmf-gvw5.

Is CVE-2025-37184 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free