7.1
High
CVE-2026-95728 Local Privilege Escalation in Virtual Intranet Access (VIA) Client for Linux
Description
An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system.
CVSS 3.1 detail
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Virtual Intranet Access (VIA) 0.0 | 0.0.0 → 4.7.8 | No fix stated |
Other CVEs of Virtual Intranet Access (VIA)
The 11 CVEs of Virtual Intranet Access (VIA) →
CVE-2026-95730
A buffer overflow vulnerability exists in HPE Networking VIA that could allow an authenticated low-privileged local user…
6.5
Medium
CVE-2026-95729
A sensitive information disclosure vulnerability exists in HPE Networking VIA
6.5
Medium
CVE-2026-95727
A command injection vulnerability exists in HPE Networking VIA
7.2
High
CVE-2026-95725
Authenticated Local Command Injection Vulnerability in the VIA Client for Linux
7.8
High