{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3ahpenetworking_via/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:hpe:networking_via:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.2,"id":"CVE-2026-95727"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Networking VIA"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["HPE"],"content_html":"\u003cp\u003eCVE-2026-95727 describes a command injection vulnerability in HPE Networking VIA. The vulnerability allows an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system. No mitigation or fixed version is currently specified in the source.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in arbitrary command execution on the host operating system with elevated privileges, potentially leading to full system compromise by an authenticated administrative user.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eInventory all instances of HPE Networking VIA within the environment.\u003c/li\u003e\n\u003cli\u003eImplement strict access controls for administrative accounts to HPE Networking VIA to mitigate unauthorized access.\u003c/li\u003e\n\u003cli\u003eMonitor administrative logs for suspicious command execution or unexpected system modifications performed by accounts associated with the application.\u003c/li\u003e\n\u003cli\u003eCoordinate with HPE to determine the availability of security patches for this vulnerability.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-11-03T22:23:16Z","date_published":"2026-11-03T22:23:16Z","id":"https://feed.craftedsignal.io/briefs/2026-11-hpe-via-command-injection/","summary":"An authenticated administrative user can exploit a command injection vulnerability in HPE Networking VIA to execute arbitrary commands with elevated privileges on the underlying operating system.","title":"HPE Networking VIA: Command injection (CVE-2026-95727)","url":"https://feed.craftedsignal.io/briefs/2026-11-hpe-via-command-injection/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:hpe:networking_via:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}