CVE-2026-95724 PUBLISHED

Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)

Assigner: hpe
Reserved: 22.09.2026 Published: 03.11.2026 Updated: 03.11.2026

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CVSS Score: 8.1

Product Status

Vendor Hewlett Packard Enterprise (HPE)
Product Virtual Intranet Access (VIA)
Versions Default: affected
  • affected from 0.0.0 to 4.7.8 (incl.)

Credits

  • Internal security research (HPE Networking). reporter

References