{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-95724","assignerOrgId":"eb103674-0d28-4225-80f8-39fb86215de0","state":"PUBLISHED","assignerShortName":"hpe","dateReserved":"2026-09-22T14:52:25.203Z","datePublished":"2026-11-03T19:57:44.347Z","dateUpdated":"2026-11-06T19:46:50.480Z"},"containers":{"cna":{"affected":[{"defaultStatus":"affected","product":"Virtual Intranet Access (VIA)","vendor":"Hewlett Packard Enterprise (HPE)","versions":[{"lessThanOrEqual":"4.7.8","status":"affected","version":"0.0.0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"reporter","value":"Internal security research (HPE Networking)."}],"descriptions":[{"lang":"en","value":"An improper certificate validation vulnerability exists in HPE Networking Virtual Intranet Access (VIA). Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms, leading to the possible disclosure of sensitive information."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","availabilityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"providerMetadata":{"orgId":"eb103674-0d28-4225-80f8-39fb86215de0","shortName":"hpe","dateUpdated":"2026-11-03T19:59:22.807Z"},"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US"}],"source":{"advisory":"HPESBNW05173","discovery":"INTERNAL"},"title":"Unauthenticated Improper Certificate Validation leads to Authentication Bypass in HPE Networking Virtual Intranet Access (VIA)","x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-295","lang":"en","description":"CWE-295 Improper Certificate Validation"}]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-11-06T19:46:32.928856Z","id":"CVE-2026-95724","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-11-06T19:46:50.480Z"}}]}}