8.4
High
CVE-2026-95723 Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client
Description
A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system.
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:NExploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- None
- Scope
- Changed
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Virtual Intranet Access (VIA) 0.0 | 0.0.0 → 4.7.8 | No fix stated |
Other CVEs of Virtual Intranet Access (VIA)
The 11 CVEs of Virtual Intranet Access (VIA) →
CVE-2026-95730
A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user…
6.5
Medium
CVE-2026-95729
A sensitive information disclosure vulnerability exists in HPE Networking VIA
6.5
Medium
CVE-2026-95728
Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux
7.1
High
CVE-2026-95727
A command injection vulnerability exists in HPE Networking VIA
7.2
High