{"id":"CVE-2026-95729","aliases":[],"cve":{"records":[{"id":"CVE-2026-95729","source":"hpe","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-22T14:52:25.204Z","published":"2026-11-03T19:57:48.396Z","modified":"2026-11-03T20:20:01.387Z"}],"publishers":[{"name":"hpe","role":"CNA","organizationId":"eb103674-0d28-4225-80f8-39fb86215de0","modified":"2026-11-03T19:59:27.482Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-03T20:20:01.387Z"}],"references":[{"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US","tags":[],"source":"hpe"}],"weaknesses":[{"id":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","source":"CISA-ADP"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-03T20:19:51.866820Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"partial"}]}]},"title":"Authenticated Sensitive Information Disclosure in VIA","titleSource":"hpe","descriptionSource":"hpe","description":"A sensitive information disclosure vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated attacker to obtain sensitive information.","score":6.5,"severity":"medium","published":"2026-11-03T19:57:48.396Z","modified":"2026-11-03T20:20:01.387Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Hewlett Packard Enterprise (HPE)","name":"Virtual Intranet Access (VIA)","platforms":[],"versions":[{"version":"0.0.0","status":"affected","lessThanOrEqual":"4.7.8","versionType":"semver"}],"defaultStatus":"affected","cpes":[],"source":"hpe","url":"https://www.cve.org/CVERecord?id=CVE-2026-95729"}],"remediation":[],"references":["https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05173en_us&docLocale=en_US"],"sources":[{"name":"CVE","id":"CVE-2026-95729","modified":"2026-11-03T20:20:01.387Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-95729"}],"assessments":[{"source":"hpe","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":6.5}],"sourceAffected":[],"observedAt":"2026-11-03T20:27:13.576Z","kev":{"status":"not-listed","checkedAt":"2026-11-14T23:00:32.916Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-03T20:30:31.499Z","attemptedAt":"2026-11-03T20:30:31.499Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-03T20:30:31.496Z","attemptedAt":"2026-11-03T20:30:31.496Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-03T20:30:31.496Z","attemptedAt":"2026-11-03T20:30:31.496Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-03T20:30:30.969Z","attemptedAt":"2026-11-03T20:30:30.969Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-95729","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95729","modified":"2026-11-03T20:18:20.947","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","checkedAt":"2026-11-03T20:30:31.499Z"}],"aiSummary":{"text":"A sensitive information disclosure vulnerability exists in HPE Virtual Intranet Access (VIA) version 4.7.8 or less, allowing an authenticated attacker to obtain sensitive information. The weakness is exposure of sensitive information to an unauthorized actor.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-03T20:31:07.022Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-95729"}]}}