A command injection vulnerability exists in HPE Networking VIA.
A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- HPE
- Product
- Virtual Intranet Access (VIA)
- CVSS v3.1
- 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- NVD status
- Awaiting Analysis
Why it ranks 25 (Notable)
- CVSS v3.1 7.2 high
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
- CVE-2026-95727 on this site · NVD · CVE.org · Vulnpedia