What is CVE-2026-101156?

CVE-2026-101156 is a high-severity vulnerability in Arista Networks Cloudvision Cue, classified under Cross-site Scripting. CVSS score: 8.4/10. Published 2026-10-06.

How severe is CVE-2026-101156?

High severity. CVSS v3 base score is 8.4 out of 10.

XSS in Arista Networks Cloudvision Cue

CVE-2026-101156

A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.

Vulnerability class: XSS (Cross-Site Scripting)

Published 2026-10-06 · last modified 2026-10-06.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Arista Networks Cloudvision Cue

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

www.arista.com/en/support/advisories-notices/security-advisory/24808-security-a… (vendor-advisory)

Frequently asked questions

What is CVE-2026-101156?: CVE-2026-101156 is a high-severity vulnerability in Arista Networks Cloudvision Cue, classified under Cross-site Scripting. CVSS score: 8.4/10. Published 2026-10-06.
How severe is CVE-2026-101156?: High severity. CVSS v3 base score is 8.4 out of 10.