CVE-2026-95727: fallo de gravedad alta en Hewlett Packard Enterprise (HPE) Virtual…
Authenticated Command Injection Vulnerability in HPE Networking VIA
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.2epss 1.5%
A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Productos afectados
Hewlett Packard Enterprise (HPE) · Virtual Intranet Access (VIA)CVEs relacionadas — Hewlett Packard Enterprise (HPE) Virtual…
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-95725HIGHAuthenticated Local Command Injection Vulnerability in the VIA Client for LinuxEPSS 0.5%CVE-2026-95726HIGHUnauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIAEPSS 0.5%CVE-2026-95729MEDIUMAuthenticated Sensitive Information Disclosure in VIAEPSS 0.3%CVE-2026-95730MEDIUMAuthenticated Buffer Overflow Vulnerability Leads to Denial-of-Service in HPE Networking VIAEPSS 0.3%CVE-2026-95724HIGHUnauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)EPSS 0.3%CVE-2025-37186HIGHLocal Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for LinuxEPSS 0.2%