CVE-2026-95726 PUBLISHED

Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA

Assigner: hpe
Reserved: 22.09.2026 Published: 03.11.2026 Updated: 03.11.2026

A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of the affected client.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Score: 7.5

Product Status

Vendor Hewlett Packard Enterprise (HPE)
Product Virtual Intranet Access (VIA)
Versions Default: affected
  • affected from 0.0.0 to 4.7.8 (incl.)

Credits

  • Internal security research (HPE Networking). reporter

References