CVE-2026-95727: Authenticated Command Injection Vulnerability in HPE Networking VIA

Published Nov 3, 2026

Updated

A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.

Event History

Nov 3, 2026

CVE Published

via MITRE·07:57 PM

Data Sourced

via MITRE·07:57 PM

DescriptionSeverity

Data Sourced

via NVD·08:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An authenticated administrative user of HPE Networking VIA can exploit it. The provided information does not indicate that unauthenticated users can trigger the vulnerability.

What level of access could exploitation provide?

Successful exploitation allows arbitrary command execution with elevated privileges on the underlying operating system. This can affect confidentiality, integrity, and availability.

Does exploitation require user interaction or difficult attack conditions?

No user interaction is required, and the attack complexity is rated low. However, the attacker must already hold authenticated administrative privileges.

CVE-2026-95727: Authenticated Command Injection Vulnerability in HPE Networking VIA

Event History

Frequently Asked Questions

Who can exploit this issue?

What level of access could exploitation provide?

Does exploitation require user interaction or difficult attack conditions?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What level of access could exploitation provide?

Does exploitation require user interaction or difficult attack conditions?