{"id":"CVE-2026-95723","kind":"vulnerability","aliases":["CVE-2026-95723"],"related":[],"title":"HPE Networking VIA client: missing integrity verification allows local privilege escalation","description":"A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system.","summary":"HPE's advisory HPESBNW05173 covers a missing integrity verification flaw in the VIA client (CVSS 8.4, local, low privileges). A low-privileged local attacker could run code with elevated privileges. NVD does not say which platform is affected, so the Windows tag was dropped. The affected and fixed versions are not confirmed. HPE's generic guidance is to update the VIA client to the latest version. No exploitation or public PoC found.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["enterprise-vpn","hpe-aruba","local-privilege-escalation","other","via-client","windows"],"not_affected_if":["client-not-installed"],"how_to_check":"Check whether the HPE Aruba Networking Virtual Intranet Access (VIA) client is installed on any endpoint and note its version. Compare it with the fixed version in HPE advisory HPESBNW05173 (support.hpe.com, docId hpesbnw05173en_us). The page needs JavaScript, so open it in a browser. I could not read the version table.","fix":null,"status":"open","published_at":"2026-11-03T20:18:20+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","triaged_at":"2026-11-03T20:49:48+00:00","updated_at":"2026-11-03T21:02:52+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-11-03T20:49:48Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Virtual Intranet Access client: missing integrity check allows local privilege escalation","impact":"high","summary":"The Virtual Intranet Access (VIA) client does not verify the integrity of something it loads or runs. A low-privileged local user can exploit this to execute arbitrary code with elevated privileges on the operating system.","audience":"businesses","category":"other","nicknames":[],"who_cares":["via-client","windows","enterprise-vpn"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"local low-privileged user runs code as elevated system user","analyst_note":"Check the NVD entry and the vendor advisory for affected VIA client versions, the platform, and the fixed version.","how_to_check":"- Confirm whether the Virtual Intranet Access (VIA) client is installed on the machine, and note its version.\n- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["client-not-installed"],"who_is_affected":"Machines running the Virtual Intranet Access (VIA) client are exposed to a local user gaining elevated privileges. The sources do not name affected versions or the exact component lacking the check. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000643,"input_tokens":4112,"output_tokens":464,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the NVD entry and the vendor advisory for affected VIA client versions, the platform, and the fixed version.","search":"'-2026':13A,16A '-95723':14A,17A '8.4':48B 'access':118C 'advisori':35B 'affect':71B,79B 'allow':8A,127C 'arbitrari':136C 'aruba':23B 'attack':57B,133C 'client':4A,31B,46B,95B,120C 'code':60B,137C 'confirm':85B 'could':58B,126C 'cover':37B 'cve':12A,15A 'cvss':47B 'discov':113C 'drop':77B 'elev':62B,139C 'enterpris':19B 'enterprise-vpn':18B 'escal':11A,27B 'execut':135C 'exploit':101B,122C 'fix':81B 'flaw':42B 'found':105B 'generic':88B 'guidanc':89B 'hpe':1A,22B,33B,86B 'hpe-aruba':21B 'hpesbnw05173':36B 'integr':6A,40B,108C 'intranet':117C 'latest':98B 'local':9A,25B,49B,56B,132C 'local-privilege-escal':24B 'low':50B,54B,130C 'low-privileg':53B,129C 'miss':5A,39B,107C 'network':2A 'nvd':64B 'oper':144C 'platform':69B 'poc':104B 'privileg':10A,26B,51B,55B,63B,131C,140C 'public':103B 'run':59B 'say':67B 'success':121C 'system':145C 'tag':75B 'under':143C 'updat':92B 'verif':7A,41B,109C 'version':82B,99B 'via':3A,30B,45B,94B,119C 'via-client':29B 'virtual':116C 'vpn':20B 'vulner':110C,125C 'window':32B,74B","nicknames":[],"mitigations":[],"who_affected":"Machines running the Virtual Intranet Access (VIA) client are exposed to a local user gaining elevated privileges. The sources do not name affected versions or the exact component lacking the check. unknown","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["enterprisevpn","high","hpearuba","localprivilegeescalation","other","viaclient","windows"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95723","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95723","severity":null,"published_at":"2026-11-03T20:18:20+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","fetched_at":"2026-11-03T20:49:24+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95723:1558","url":null,"severity":null,"published_at":"2026-11-03T21:02:52+00:00","modified_at":"2026-11-03T21:02:52+00:00","first_seen_at":"2026-11-03T21:02:52+00:00","fetched_at":"2026-11-03T21:02:52+00:00","note":"Primary advisory HPESBNW05173 (HPE CNA) linked, but its body is JS-only and browser-cli session died, so versions, platform and fix are unread: nothing verified. Prior fix_status none is unsupported. NVD/cvefeed give only generic 'update to latest'. Revisit to read the advisory table."}],"documents":[{"id":60674,"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US","title":"HPESBNW05173 rev.1 - Multiple Vulnerabilities in HPE Networking Virtual Intranet Access (VIA)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":60680,"url":"https://cvefeed.io/vuln/detail/CVE-2026-95723","title":"CVE-2026-95723 (cvefeed, mirrors NVD/HPE CNA text)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}