CVE-2026-95728
Awaiting Analysis Awaiting Analysis - Queue

Privilege Escalation via Arbitrary File Write in HPE VIA Client

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: Hewlett Packard Enterprise (HPE)

Description
An arbitrary file write vulnerability exists in the Virtual Intranet Access (VIA) client. Successful exploitation could allow a local attacker with low privileges to escalate privileges on the affected system.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
CVE-2026-95728
EUVD
EUVD-2026-116205

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA) 0.0.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an arbitrary file write vulnerability in the HPE Virtual Intranet Access (VIA) client. It allows a local attacker with low privileges to write files to arbitrary locations on the system, which could lead to privilege escalation.

Impact Analysis

A successful exploit could let an attacker gain higher privileges on your system, potentially allowing them to take control of it or access sensitive data. Since it requires local access, physical or network access to the system is needed.

Mitigation Strategies

Update the HPE Virtual Intranet Access (VIA) client to the latest version provided by HPE. Restrict local user permissions to minimize privilege escalation risks. Monitor system logs for unusual file write activities.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95728. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...