{"id":"CVE-2026-95722","published":"2026-11-03T20:18:20.033","lastModified":"2026-11-03T20:30:24.880","description":"A local privilege escalation vulnerability has been discovered in the Virtual Intranet Access (VIA) client. Successful exploitation of this vulnerability could allow a local attacker with low privileges to execute arbitrary commands with elevated privileges on the underlying operating system.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A local privilege escalation flaw in the Virtual Intranet Access (VIA) client allows low-privileged users to execute arbitrary commands with elevated privileges on the host OS.","exploitability":"Exploitation requires local access and low privileges, with no user interaction needed, making it feasible for authenticated local attackers.","blast_radius":"Successful exploitation grants full system compromise, enabling data theft, malware deployment, or lateral movement from a compromised low-privilege account.","remediation":"No fixed version is published in the description; disable the affected VIA client feature or restrict its execution to trusted users until vendor guidance is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["privilege-escalation","local","elevation-of-privilege"],"model":"garnet-coder","analyzedAt":"2026-11-04T09:58:07.214Z"}}