Cloudanix VulnDB

CVE-2025-37168

Critical · 9.1

CVSS

9.1

EPSS

0.5%

Published

Jan 13, 2026

CISA due date

—

The record

Arbitrary file deletion vulnerability have been identified in a system function of mobility conductors running AOS-8 operating system. Successful exploitation of this vulnerability could allow an unauthenticated remote malicious actor to delete arbitrary files within the affected system and potentially result in denial-of-service conditions on affected devices.

Affected packages

Ecosystem Package Introduced Fixed