---
id: "CVE-2026-95722"
kind: "vulnerability"
aliases: ["CVE-2026-95722"]
title: "Virtual Intranet Access client: local users can gain elevated system privileges"
severity: "high"
cvss: 8.8
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["aruba", "endpoints", "hpe", "infrastructure", "via-client", "vpn", "windows"]
not_affected_if: ["client-not-installed"]
published_at: "2026-11-03T20:18:20+00:00"
first_seen_at: "2026-11-03T20:49:24+00:00"
updated_at: "2026-11-03T21:02:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95722", "first_seen_at": "2026-11-03T20:49:24+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-03T21:02:57+00:00"}]
---

# Virtual Intranet Access client: local users can gain elevated system privileges

HPE Networking's Virtual Intranet Access (VIA) client has a local privilege escalation flaw (CVSS 8.8, rated by HPE). A low-privileged local user can run arbitrary commands with elevated privileges on the host OS. HPE's bulletin, probably HPESBNW05173, should list versions and fixes. I could not read it, so versions and fix are unknown.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

Find out whether the HPE Aruba / HPE Networking VIA client is installed on endpoints and note its version (on Windows, Apps & features; on Linux, the package manager). Compare it with the affected and fixed versions in HPE bulletin HPESBNW05173 (support.hpe.com, docId hpesbnw05173en_us). Not yet confirmed that this CVE is in that bulletin.

## Timeline

- 2026-11-03T20:49:24+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95722
- 2026-11-03T21:02:57+00:00 analyst — Vendor is HPE (Aruba) Networking; CVE published 2026-11-03 with a batch of VIA CVEs (CVE-2026-95722..95730). Likely covered by HPE bulletin HPESBNW05173 (cited by sibling CVE-2026-95723), but that page is JS-only and the browser is out of quota, so I could not read versions, fix or platform. The 10-28 advance notice (HPESBNW05166) names VIA but gives no versions. Nothing verified; revisit when the bulletin text is readable. The Windows tag is unconfirmed: older VIA Windows-client CVEs exist but this one is not tied to a platform in anything I read.

## Documents

- [mentions] HPESBNW05173 rev.1 - Multiple Vulnerabilities in HPE Networking Virtual Intranet Access (VIA) https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US
- [mentions] HPESBNW05166 advance notification for November 03, 2026 (VIA, Fabric Composer; no versions given) https://vulners.com/hpe/HPESBNW05166

## From the sources

A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a local attacker with low privileges to execute arbitrary commands with elevated privileges on the underlying operating system.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_