CVE-2026-95722 PUBLISHED

Local Privilege Escalation Vulnerability in the Virtual Intranet Access (VIA) Client

Assigner: hpe
Reserved: 22.09.2026 Published: 03.11.2026 Updated: 03.11.2026

A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a local attacker with low privileges to execute arbitrary commands with elevated privileges on the underlying operating system.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Score: 8.8

Product Status

Vendor Hewlett Packard Enterprise (HPE)
Product Virtual Intranet Access (VIA)
Versions Default: affected
  • affected from 0.0.0 to 4.7.8 (incl.)

Credits

  • Internal security research (HPE Networking). reporter

References