Known vulnerabilities in Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA)

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-95730	A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user…	6.5 Medium	Nov 3, 2026
CVE-2026-95729	A sensitive information disclosure vulnerability exists in HPE Networking VIA	6.5 Medium	Nov 3, 2026
CVE-2026-95728	An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client	7.1 High	Nov 3, 2026
CVE-2026-95727	A command injection vulnerability exists in HPE Networking VIA	7.2 High	Nov 3, 2026
CVE-2026-95725	A command injection vulnerability exists in the VIA client for Linux	7.8 High	Nov 3, 2026
CVE-2026-95726	A buffer overflow vulnerability in HPE Networking VIA could allow an unauthenticated remote attacker to conduct a denial…	7.5 High	Nov 3, 2026
CVE-2026-95724	An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA)	8.1 High	Nov 3, 2026
CVE-2026-95723	A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client	8.4 High	Nov 3, 2026
CVE-2026-95722	A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client	8.8 High	Nov 3, 2026
CVE-2025-37186	A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA)…	7.8 High	Jan 13, 2026
CVE-2025-25041	A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to…	5.5 Medium	Apr 1, 2025