CVE-2026-101157
Security Advisory 0192
CVSS Score
8.7
EPSS Score
0.0%
EPSS Percentile
0th
A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated browser session, access sensitive data, modify system state, or disrupt affected services.
| CWE | CWE-79 |
| Vendor | arista networks |
| Product | cloudvision cue |
| Published | Oct 6, 2026 |
| Last Updated | Oct 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for arista networks cloudvision cue
Be the first to know when new high vulnerabilities affecting arista networks cloudvision cue are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Arista Networks / CloudVision CUE
2021.2.0 ≤ 2026.2.0