Skip to content
OpenAdvisories
High · 7.2 CVE-2026-95727 EUVD-2026-116204GHSA-5j3r-xgpq-wxgq

Authenticated Command Injection Vulnerability in HPE Networking VIA

Published Nov 3, 2026 · Updated Nov 3, 2026 · Assigned by hpe

Description

A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) 0.0.0 – ≤ 4.7.8 —

References