CVE-2026-95723: Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

Published Nov 3, 2026

Updated

A missing integrity verification vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a low-privileged local attacker to execute arbitrary code with elevated privileges on the underlying operating system.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:57 PM

Data Sourced

via MITRE·07:57 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

An attacker needs low-privileged local access to the system running the VIA client. No user interaction is required according to the provided CVSS vector.

What could successful exploitation allow?

Successful exploitation could let the local attacker execute arbitrary code with elevated privileges on the underlying operating system. The vulnerability affects confidentiality and integrity, while no availability impact is indicated.

CVE-2026-95723: Authenticated Local Missing Integrity Verification Vulnerability leads to Local Privilege Escalation in Virtual Intranet Access (VIA) Client

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could successful exploitation allow?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What could successful exploitation allow?