CVE-2026-95727 in Virtual Intranet Access

Summary

by MITRE • 11/03/2026

A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsible: Hpe
• Reservation: 09/22/2026
• Disclosure: 11/03/2026
• Moderation: accepted
• Entry: VDB-430568
• CPE: 20261103
• CWE: CWE-77 (confirmed)
• CVSS: 7.2 (CNA)
• EPSS: 0.00000
• KEV: no
• Activities: very low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-95727
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-95727
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-95727/