CVE-2026-95725
A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to
CVSS
7.8
High
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Nov 3, 2026 · Last modified: Nov 3, 2026
Not enough EPSS history yet.
A command injection vulnerability exists in the VIA client for Linux. Successful exploitation could allow a low-privileged local attacker to execute arbitrary commands with elevated privileges on the affected system.
No related CVEs by CWE or product.