Skip to content
OpenAdvisories
High · 7.8 CVE-2026-95725 EUVD-2026-116202GHSA-5ww3-x97f-28v8

Authenticated Local Command Injection Vulnerability in the VIA Client for Linux

Published Nov 3, 2026 · Updated Nov 6, 2026 · Assigned by hpe

Description

A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) 0.0.0 – ≤ 4.7.8 —

References