Live › vulnerability › CVE-2026-95723
HPE's advisory HPESBNW05173 covers a missing integrity verification flaw in the VIA client (CVSS 8.4, local, low privileges). A low-privileged local attacker could run code with elevated privileges. NVD does not say which platform is affected, so the Windows tag was dropped. The affected and fixed versions are not confirmed. HPE's generic guidance is to update the VIA client to the latest version. No exploitation or public PoC found.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Machines running the Virtual Intranet Access (VIA) client are exposed to a local user gaining elevated privileges. The sources do not name affected versions or the exact component lacking the check. unknown
No product ranges from the sources yet.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95723")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.