CVE-2025-37168
Critical · 9.1CVSS
9.1
EPSS
0.5%
Published
Jan 13, 2026
CISA due date
—
The record
Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|