{"id":"CVE-2026-95724","kind":"vulnerability","aliases":["CVE-2026-95724"],"related":[],"title":"HPE VIA: improper certificate validation lets remote attackers bypass authentication","description":"An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.","summary":"HPE Networking Virtual Intranet Access (VIA) does not properly validate certificates (CVSS 3.1 8.1, high). Per the HPE CNA description, an unauthenticated remote attacker could bypass authentication and possibly disclose sensitive information. The affected and fixed versions are unknown, and no exploitation is reported in the sources read.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["aruba","certificate-validation","hpe","infrastructure","networking","remote-access","via","vpn"],"not_affected_if":["via-not-deployed"],"how_to_check":"Check whether HPE Networking (Aruba) Virtual Intranet Access (VIA) is deployed, as a VPN client or with its controller/gateway, and note the installed version. Compare it with the version table in HPE bulletin HPESBNW05173 (support.hpe.com, docId hpesbnw05173en_us). Affected and fixed versions are unknown here because the bulletin body could not be read.","fix":null,"status":"open","published_at":"2026-11-03T20:18:20+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","triaged_at":"2026-11-03T20:49:55+00:00","updated_at":"2026-11-03T21:01:33+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-03T20:49:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"HPE VIA: improper certificate validation lets remote attackers bypass authentication","impact":"medium","summary":"HPE Networking Virtual Intranet Access (VIA) does not properly validate certificates. An unauthenticated remote attacker could bypass authentication and possibly read sensitive information.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["hpe","vpn","remote-access","networking"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"unauthenticated attacker bypasses authentication and reads sensitive information","analyst_note":"Find HPE's security bulletin for CVE-2026-95724 to confirm affected versions, fixed versions and whether the remote attack path is internet-facing.","how_to_check":"- Confirm whether HPE Networking Virtual Intranet Access (VIA) is deployed in your environment, and note the installed version.\n- Check the HPE security bulletin for the affected version ranges, which the sources do not state: unknown","plain_action":"","needs_analyst":true,"not_affected_if":["via-not-deployed"],"who_is_affected":"Organizations running HPE Networking Virtual Intranet Access (VIA) as a remote access product. The sources do not state the affected versions or configurations. Teams not running VIA can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.00067,"input_tokens":4113,"output_tokens":517,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find HPE's security bulletin for CVE-2026-95724 to confirm affected versions, fixed versions and whether the remote attack path is internet-facing.","search":"'-2026':12A,15A '-95724':13A,16A '3.1':41B '8.1':42B 'access':26B,33B,88C 'affect':62B 'allow':93C 'aruba':17B 'attack':8A,52B,97C 'authent':10A,55B,100C 'bypass':9A,54B,99C 'certif':4A,19B,39B,79C 'certificate-valid':18B 'cna':47B 'could':53B,92C 'cve':11A,14A 'cvss':40B 'descript':48B 'disclos':58B 'disclosur':106C 'exist':82C 'exploit':70B,91C 'fix':64B 'high':43B 'hpe':1A,21B,29B,46B,84C 'improp':3A,78C 'inform':60B,109C 'infrastructur':22B 'intranet':32B,87C 'lead':102C 'let':6A 'mechan':101C 'network':23B,30B,85C 'per':44B 'possibl':57B,105C 'proper':37B 'read':76B 'remot':7A,25B,51B,96C 'remote-access':24B 'report':72B 'sensit':59B,108C 'sourc':75B 'success':90C 'unauthent':50B,95C 'unknown':67B 'valid':5A,20B,38B,80C 'version':65B 'via':2A,27B,34B,89C 'virtual':31B,86C 'vpn':28B 'vulner':81C","nicknames":[],"mitigations":[],"who_affected":"Organizations running HPE Networking Virtual Intranet Access (VIA) as a remote access product. The sources do not state the affected versions or configurations. Teams not running VIA can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["aruba","certificatevalidation","high","hpe","infrastructure","networking","remoteaccess","via","vpn"],"campaign_type":null,"first_public_at":"2026-11-03T20:18:20+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss_by":"security-alert@hpe.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95724","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95724","severity":null,"published_at":"2026-11-03T20:18:20+00:00","modified_at":"2026-11-03T20:30:24+00:00","first_seen_at":"2026-11-03T20:49:24+00:00","fetched_at":"2026-11-03T20:49:24+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-95724:1557","url":null,"severity":null,"published_at":"2026-11-03T21:01:33+00:00","modified_at":"2026-11-03T21:01:33+00:00","first_seen_at":"2026-11-03T21:01:33+00:00","fetched_at":"2026-11-03T21:01:33+00:00","note":"HPE bulletin HPESBNW05173 identified and linked (also covers other CVEs), but its body is JS-rendered and web-cli/browser-cli returned only the title, so affected/fixed versions are unread. CVSS 8.1 and the unauthenticated-remote description come from the HPE CNA text via cvefeed. The earlier advance notice HPESBNW05166 said HPE would not give versions in advance. Nothing verified. X not checked. To settle: open the bulletin in a browser for the version table."}],"documents":[{"id":60674,"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US","title":"HPESBNW05173 rev.1 - Multiple Vulnerabilities in HPE Networking Virtual Intranet Access (VIA)","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":60675,"url":"https://cvefeed.io/vuln/detail/CVE-2026-95724","title":"CVE-2026-95724 - cvefeed (CVSS 8.1, HPE CNA text)","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}