7.8
High
CVE-2026-95725 Authenticated Local Command Injection Vulnerability in the VIA Client for Linux
Description
A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system.
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Virtual Intranet Access (VIA) 0.0 | 0.0.0 → 4.7.8 | No fix stated |
Other CVEs of Virtual Intranet Access (VIA)
The 11 CVEs of Virtual Intranet Access (VIA) →
CVE-2026-95730
A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user…
6.5
Medium
CVE-2026-95729
A sensitive information disclosure vulnerability exists in HPE Networking VIA
6.5
Medium
CVE-2026-95728
Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux
7.1
High
CVE-2026-95727
A command injection vulnerability exists in HPE Networking VIA
7.2
High