CVE-2026-95723 PUBLISHED

Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

Assigner: hpe
Reserved: 22.09.2026 Published: 03.11.2026 Updated: 03.11.2026

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system.

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS Score: 8.4

Product Status

Vendor Hewlett Packard Enterprise (HPE)
Product Virtual Intranet Access (VIA)
Versions Default: affected
  • affected from 0.0.0 to 4.7.8 (incl.)

Credits

  • Internal security research (HPE Networking). reporter

References