Arbitrary File Write Vulnerability in HPE Virtual Intranet Access Client
CVE-2026-95728

7.1HIGH

Key Information:

Vendor

HP (HP)

Status
Virtual Intranet Access (via)
Vendor
CVE Published:
3 November 2026

What is CVE-2026-95728?

An arbitrary file write vulnerability in the HPE Virtual Intranet Access (VIA) client allows local attackers with low privileges to exploit the flaw, potentially enabling them to escalate their privileges within the affected system. This vulnerability could lead to unauthorized access and manipulation of sensitive files, posing significant security risks. Organizations using the HPE VIA client are advised to take immediate action to mitigate potential threats associated with this vulnerability.

Affected Version(s)

Virtual Intranet Access (VIA) 0.0.0 <= 4.7.8

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpe...

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lucid_Duck
.