CVE-2026-95724: high-severity vulnerability in Hewlett Packard Enterprise (HPE) Virtual…
Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
18Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.1
An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected products
Hewlett Packard Enterprise (HPE) · Virtual Intranet Access (VIA)Related CVEs — Hewlett Packard Enterprise (HPE) Virtual…
In the same product, most dangerous first.
CVE-2025-37186HIGHLocal Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for LinuxEPSS 0.2%CVE-2025-25041MEDIUMArbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows ClientEPSS 0.1%CVE-2026-95730MEDIUMAuthenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIAEPSS —CVE-2026-95729MEDIUMAuthenticated Sensitive Information Disclosure in VIAEPSS —CVE-2026-95728HIGHLocal Privilege Escalation in Virtual Intranet Access (VIA) Client for LinuxEPSS —CVE-2026-95727HIGHAuthenticated Command Injection Vulnerability in HPE Networking VIAEPSS —