Patch now – this new botnet is targeting HPR OneView vulnerabilities

• HPE OneView RCE Critical Flaw (CVE-2025-37164) Exploited Despite Patch Release
• Over 40,000 botnet-driven attacks observed, primarily from RondoDox targeting key sectors
• CPR and CISA urge immediate patching due to active, high-severity exploitation

There is currently a “dramatic escalation” in the exploitation of a critical vulnerability in HPE OneView, experts warned.

HPE OneView is a unified IT infrastructure management platform that automates provisioning and lifecycle management using software-defined templates.