CVE-2026-95724: Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)

Published Nov 3, 2026

Updated

An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:57 PM

Data Sourced

via MITRE·07:57 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverity

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attacker can be unauthenticated and remote. Exploitation requires user interaction, as reflected by the UI:R attack vector.

What could a successful attack allow?

A successful exploit could bypass authentication mechanisms and may disclose sensitive information. The supplied severity vector also indicates high confidentiality and integrity impact, with no availability impact.

CVE-2026-95724: Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What could a successful attack allow?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What could a successful attack allow?