CVE-2026-102158
Security Advisory 0190
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability.
| CWE | CWE-74 |
| Vendor | arista networks |
| Product | cloudvision cue |
| Published | Oct 6, 2026 |
| Last Updated | Oct 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for arista networks cloudvision cue
Be the first to know when new medium vulnerabilities affecting arista networks cloudvision cue are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Arista Networks / CloudVision CUE
2022.2.0 ≤ 2026.2.0