Live › vulnerability › CVE-2026-95727
HPE Networking VIA has a command injection flaw that lets an authenticated administrative user run arbitrary commands on the underlying operating system with elevated privileges. An attacker who already holds admin credentials can take control of the host beyond the management interface.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 20:49 UTC. All times on this page are UTC.
Teams running HPE Networking Virtual Intranet Access (VIA) where someone holds administrative credentials. The flaw lets an authenticated admin run commands on the underlying OS with elevated privileges, so it matters most if admin accounts are shared, weak or exposed. If admin access is tightly limited, the risk is lower, but patch when the fixed release is confirmed.
No product ranges from the sources yet.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.
This page as .md · .json · in your agent: get_signal("CVE-2026-95727")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.