Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Zero Day Initiative

Cisco Talos

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A vulnerability in an AOS firmware binary allows an authenticated malicious actor to permanently delete necessary boot information. Successful exploitation may render the system unbootable, resulting in a Denial of Service that can only be resolved by replacing the affected hardware.

CVE-2025-37139 is a vulnerability in the ArubaOS firmware binaries used in Hewlett Packard Enterprise's Aruba network devices. The flaw allows an authenticated attacker with high privileges to delete essential boot information from the device's firmware. This deletion is permanent and prevents the device from booting, effectively causing a denial of service. Recovery from this state is not possible through software means and requires physical replacement of the affected hardware, making the impact severe in terms of availability. The vulnerability affects multiple ArubaOS versions, including 8.10.0.0, 8.12.0.0, 8.13.0.0, 10.4.0.0, and 10.7.0.0. The CVSS v3.1 score is 6.0, indicating medium severity, with vector AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H, meaning the attack requires local access with low complexity, high privileges, no user interaction, and impacts availability with scope changed. No confidentiality or integrity impact is noted. No known exploits have been reported in the wild yet. The vulnerability is critical because it can cause permanent hardware damage, forcing device replacement and potentially causing extended network outages. ArubaOS devices are widely used in enterprise and service provider networks for wireless and wired connectivity, making this vulnerability a significant risk for network availability and business continuity. The requirement for authenticated high privilege access limits the attack surface but does not eliminate risk, especially if credential compromise or insider threats occur. The lack of patch links suggests that fixes may be pending or require vendor coordination. Organizations should monitor for updates and implement compensating controls to prevent unauthorized privileged access.

Detailed information about CVE-2025-37139: Vulnerability in Hewlett Packard Enterprise (HPE) ArubaOS (AOS) affecting Hewlett Packard Enterprise (HPE) ArubaOS (A

CVE-2025-37139: Vulnerability in Hewlett Packard Enterprise (HPE) ArubaOS (AOS) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-37139: Vulnerability in Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Threats Tagged 'cve-2025-37139'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-37139'

Lead Pen Test Professional