Missing Integrity Verification in Virtual Intranet Access (VIA) Client by HPE
CVE-2026-95723

8.4HIGH

Key Information:

Vendor

HP (HP)

Status
Virtual Intranet Access (via)
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95723?

A missing integrity verification vulnerability has been identified in the Virtual Intranet Access (VIA) client by HPE. Exploitation of this vulnerability could enable a local attacker, who has low privileges, to execute arbitrary code with heightened privileges on the underlying operating system. This could lead to unauthorized actions and significant security risks for affected systems, necessitating immediate attention and remediation.

Affected Version(s)

Virtual Intranet Access (VIA) 0.0.0 <= 4.7.8

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.