Improper Certificate Validation in HPE Networking VIA Software
CVE-2026-95724

8.1HIGH

Key Information:

Vendor

HP (HP)

Status
Virtual Intranet Access (via)
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95724?

An improper certificate validation vulnerability has been identified in HPE Networking Virtual Intranet Access (VIA). This flaw can be exploited by an unauthenticated remote attacker to bypass the authentication mechanisms in place, which may lead to unauthorized access and the potential disclosure of sensitive information. Organizations using HPE VIA should assess their security posture and apply necessary updates or mitigations to protect against possible exploits.

Affected Version(s)

Virtual Intranet Access (VIA) 0.0.0 <= 4.7.8

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Internal security research (HPE Networking).
.