{"id":"CVE-2026-95724","title":"Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)","summary":"An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible …","severity":"high","cvss":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvssSource":"cna","vendor":"Hewlett Packard Enterprise (HPE)","product":"Virtual Intranet Access (VIA)","affected":["virtual_intranet_access_via >= 0.0.0 <= 4.7.8"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-11-06T19:46:32.928856Z"},"published":"2026-11-03","updated":"2026-11-06","sourceUpdated":"2026-11-06T19:46:50.480Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-95724","references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US"}],"tags":["cve.org"],"epss":0.00279,"epssPercentile":0.20446,"ingestedAt":"2026-11-05T20:33:06.427Z","slug":"CVE-2026-95724","body":"## Overview\n\nAn improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.\n\n## Affected\n\n- `virtual_intranet_access_via >= 0.0.0 <= 4.7.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":45,"depthScoreParts":{"impact":44.6,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}