CVE-2026-95725

High · 7.8

CVSS

7.8

EPSS

0.5%

Published

Nov 3, 2026

CISA due date

—

The record

A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system.

Affected packages

Ecosystem	Package	Introduced	Fixed