Skip to content
OpenAdvisories
High · 7.8 CVE-2025-37186 EUVD-2026-2034GHSA-qp9g-xphh-469w

Local Privilege Escalation Vulnerability in HPE Aruba Networking Virtual Intranet Access (VIA) Client for Linux

Published Jan 13, 2026 · Updated Mar 2, 2026 · Assigned by hpe

Description

A local privilege-escalation vulnerability has been discovered in the HPE Aruba Networking Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a local attacker to achieve arbitrary code execution with root privileges.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) 4.0.0 – ≤ 4.7.5 —

References