Skip to content
OpenAdvisories
High · 8.1 CVE-2026-95724 EUVD-2026-116201GHSA-9934-3x3p-7hrm

Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)

Published Nov 3, 2026 · Updated Nov 6, 2026 · Assigned by hpe

Description

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) 0.0.0 – ≤ 4.7.8 —

References