Database/Control plane, storage & DevOps

HPE StoreOnce (command injection RCE): Second unauthenticated command-injection RCE path on StoreOnce

CVE-2025-37092Control plane, storage & DevOpscurated

Impact

Second unauthenticated command-injection RCE path on StoreOnce.

Who can reach it

Unauthenticated network access.

What to do

Upgrade StoreOnce per HPESBST04847.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbst04847en_us&docLocale=en_US

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.