HPE ONEVIEW FLAW RATED CVSS 10.0 ALLOWS UNAUTHENTICATED REMOTE CODE EXECUTION

Summary from the TLDR InfoSec newsletter

Hewlett Packard Enterprise has patched a critical remote code execution vulnerability in HPE OneView, tracked as CVE-2025-37164 with a maximum CVSS score of 10.0, that allows unauthenticated attackers to execute code remotely. The flaw affects all versions before 11.00, making prompt patching essential to prevent exploitation.