CVE-2026-101156
Security Advisory 0192
CVSS Score
8.4
EPSS Score
0.0%
EPSS Percentile
0th
A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.
| CWE | CWE-79 |
| Vendor | arista networks |
| Product | cloudvision cue |
| Published | Oct 6, 2026 |
| Last Updated | Oct 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for arista networks cloudvision cue
Be the first to know when new high vulnerabilities affecting arista networks cloudvision cue are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Arista Networks / CloudVision CUE
2025.2.0 ≤ 2026.2.0