CVE-2026-95727
High · 7.2CVSS
7.2
EPSS
1.5%
Published
Nov 3, 2026
CISA due date
—
The record
A command injection vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated administrative user to execute arbitrary commands with elevated privileges on the underlying operating system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-105982 Improper input validation in the IPsec VPN function may allow a remote attacker with high… CWE-77
- CVE-2026-105980 Improper input validation in the WireGuard VPN function may allow a remote attacker with… CWE-77
- CVE-2026-105979 Improper input validation in the ZeroTier VPN function may allow a remote attacker with… CWE-77
- CVE-2026-120345 A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. CWE-77
- CVE-2026-120344 A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. CWE-77
- CVE-2026-120282 A vulnerability was determined in WAVLINK WN536AX6-A V260507. CWE-77
- CVE-2026-120279 A flaw has been found in WAVLINK WN536AX6-A V260507. CWE-77
- CVE-2026-120280 A vulnerability has been found in WAVLINK WN536AX6-A V260507. CWE-77