CVE-2026-95722

A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a local attacker with low privileges to execute arbitrary commands with elevated privileges on the underlying operating system...

CVE-2026-95723

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-95728

An arbitrary file write vulnerability exists in the Virtual Intranet Access VIA client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system...

CVE-2026-95724

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access VIA. Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information...

EUVD-2026-116205

An arbitrary file write vulnerability exists in the Virtual Intranet Access VIA client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system...

CVE-2026-95728

An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client for Linux. A local attacker with low privileges could successfully exploit this flaw to achieve privilege escalation on the affected system. Specific details regarding the root cause, impacted versions, or av...

CVE-2026-95728 Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux

An arbitrary file write vulnerability exists in the Virtual Intranet Access VIA client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system...

EUVD-2026-116201

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access VIA. Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information...

CVE-2026-95724

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA) . This flaw could allow an unauthenticated remote attacker to bypass authentication mechanisms, potentially leading to the disclosure of sensitive information . No specific affected versions, r...

EUVD-2026-116200

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system...

EUVD-2026-116199

A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a local attacker with low privileges to execute arbitrary commands with elevated privileges on the underlying operating system...

CVE-2026-95722

A local privilege escalation vulnerability exists in the Virtual Intranet Access (VIA) client . This flaw allows a local attacker with low-level privileges to execute arbitrary commands with elevated privileges on the underlying operating system. While the vulnerability's impact is high regarding...

CVE-2026-95724: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA)

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access VIA. Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information...

CVE-2026-95725: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A command injection vulnerability exists in the VIA client for Linux

A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system...

HPESBNW05166 rev.1 - HPE Networking Advance Notification of Security Advisories for November 03, 2026.

Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual Intranet Access VIA IMPORTANT NOTE: In this advance notification, HPE Networking will not provide affected software versions Aruba Fabric Composer IMPORTANT...

CVE-2026-56275

Flowise before 3.1.0 contains a server-side request forgery vulnerability in the Execute Flow node that allows attackers to bypass security validation by providing intranet addresses through the base URL field. Attackers can initiate HTTP requests to internal network addresses, access cloud...

CVE-2025-37186

A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges...

CVE-2025-37186 Local Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for Linux

A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges...

PT-2026-2464

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking Virtual Intranet Access VIA client affected versions not specified Description A local privilege-escalation issue exists in the HPE Aruba Networking Virtual Intranet Access VIA client. Exploitation could allow a local...

CVE-2025-37186: Improper Privilege Management

A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access VIA client. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges...