7.5
High
CVE-2026-95726 Unauthenticated Buffer Overflow Vulnerability Leading to Denial-of-Service in HPE Networking VIA
Description
A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to interrupt the normal operation of the affected client.
CVSS 3.1 detail
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitable remotely over the network, without an account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- None
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Virtual Intranet Access (VIA) 0.0 | 0.0.0 → 4.7.8 | No fix stated |
Other CVEs of Virtual Intranet Access (VIA)
The 11 CVEs of Virtual Intranet Access (VIA) →
CVE-2026-95730
A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user…
6.5
Medium
CVE-2026-95729
A sensitive information disclosure vulnerability exists in HPE Networking VIA
6.5
Medium
CVE-2026-95728
Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux
7.1
High
CVE-2026-95727
A command injection vulnerability exists in HPE Networking VIA
7.2
High