Local Privilege Escalation Vulnerability in HPE Virtual Intranet Access Client
CVE-2026-95722

8.8HIGH

Key Information:

Vendor

HP (HP)

Status
Virtual Intranet Access (via)
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95722?

A local privilege escalation vulnerability has been identified in the HPE Virtual Intranet Access (VIA) client. This security flaw allows an attacker with low privileges on the local system to execute arbitrary commands with elevated privileges on the operating system. If exploited, this vulnerability could severely compromise the integrity and security of the affected systems, enabling unauthorized access and potentially leading to further attacks or data breaches. Users and organizations utilizing the VIA client should review their security measures and ensure that they apply the necessary updates to mitigate this risk.

Affected Version(s)

Virtual Intranet Access (VIA) 0.0.0 <= 4.7.8

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.