HPE security advisory (AV25-844) – Update 1

Serial number: AV25-844
Date: December 17, 2025
Updated: January 8, 2026

On December 16, 2025, HPE published security advisories to address vulnerabilities in the following products. Included was a critical update for the following :

  • HPE OneView – versions prior to v11.00
  • HPE Telco Service Activator – version 10.3.2 and prior

Update 1
On January 7, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-37164 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

Date modified: