{"affected":[{"defaultStatus":"affected","product":"Virtual Intranet Access (VIA)","source":"CNA: hpe","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"4.7.8","status":"affected","version":"0.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-95727","cwes":["CWE-77"],"description":"A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.2,"severity":"high","source":"CNA: hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793737934679,"publishedAt":1793735866604,"references":[{"source":"CNA: hpe","tags":[],"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US"}],"remediation":[],"revision":"e9531b4571b7131caf1f9bd61e906799f6ba823d46d45faca285a70cc81e24de","sources":[{"modifiedAt":1793737934679,"name":"CNA: hpe","retrievedAt":1793740993267,"url":"https://www.cve.org/CVERecord?id=CVE-2026-95727"}],"ssvc":{"assessedAt":1793737932186,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Authenticated Command Injection Vulnerability in HPE Networking VIA","updatedAt":1793740993267}