Live › vulnerability › CVE-2026-95722
HPE Networking's Virtual Intranet Access (VIA) client has a local privilege escalation flaw (CVSS 8.8, rated by HPE). A low-privileged local user can run arbitrary commands with elevated privileges on the host OS. HPE's bulletin, probably HPESBNW05173, should list versions and fixes. I could not read it, so versions and fix are unknown.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Machines where the Virtual Intranet Access (VIA) client is installed, particularly those shared by multiple local users. The sources do not name affected versions or the exact component involved. Systems without the VIA client are not affected.
No product ranges from the sources yet.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a local attacker with low privileges to execute arbitrary commands with elevated privileges on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95722")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.