HPE Networking Virtual Intranet Access: Authentication bypass via improper certificate validation (CVE-2026-95724)
HPE Networking Virtual Intranet Access (VIA) contains an improper certificate validation vulnerability that allows an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.
CVE search metadata
CVE search record: CVE-2026-95724. Severity: high. CVSS: 8.1. KEV: no. Product: Networking Virtual Intranet Access (VIA). Brief: HPE Networking Virtual Intranet Access: Authentication bypass via improper certificate validation (CVE-2026-95724). Brief link: https://feed.craftedsignal.io/briefs/2026-11-hpe-via-cert-validation/
Triage facts
Revision 1- Applicability
- Networking Virtual Intranet Access (VIA)
- Evidence
- Unknown
- Severity
- High
- Sources
- 1 public source
- Freshness
- Revision 1Nov 3, 22:20 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information.