HPE Networking VIA: Command injection (CVE-2026-95727)
An authenticated administrative user can exploit a command injection vulnerability in HPE Networking VIA to execute arbitrary commands with elevated privileges on the underlying operating system.
CVE search metadata
CVE search record: CVE-2026-95727. Severity: high. CVSS: 7.2. KEV: no. Product: Networking VIA. Brief: HPE Networking VIA: Command injection (CVE-2026-95727). Brief link: https://feed.craftedsignal.io/briefs/2026-11-hpe-via-command-injection/
Triage facts
Revision 1- Applicability
- Networking VIA
- Evidence
- Unknown
- Severity
- High
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 3, 22:23 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Likely
CVE-2026-95727 describes a command injection vulnerability in HPE Networking VIA. The vulnerability allows an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system. No mitigation or fixed version is currently specified in the source.
Impact
Successful exploitation results in arbitrary command execution on the host operating system with elevated privileges, potentially leading to full system compromise by an authenticated administrative user.
Recommendation
- Inventory all instances of HPE Networking VIA within the environment.
- Implement strict access controls for administrative accounts to HPE Networking VIA to mitigate unauthorized access.
- Monitor administrative logs for suspicious command execution or unexpected system modifications performed by accounts associated with the application.
- Coordinate with HPE to determine the availability of security patches for this vulnerability.
Immediate actions
Inventory all HPE Networking VIA instances
Threat Hunt
Monitor administrative console activity for signs of shell command execution
Data: Application audit logs, Administrative command execution logs
Mitigations
Enforce strict MFA and access controls for administrative administrative interfaces
CVE-2026-95727