Arista Networks Cloudvision Cue

9 CVEs affecting Arista Networks Cloudvision Cue. Latest disclosed: 2026-10-06. Critical: 1, High: 5.

Top CVEs affecting Arista Networks Cloudvision Cue
CVESeverityScorePublishedSummary
CVE-2026-102159Critical9.82026-10-06An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Success…
CVE-2026-102161High8.82026-10-06An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers)…
CVE-2026-101157High8.72026-10-06A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes…
CVE-2026-102155High8.52026-10-06An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, lead…
CVE-2026-101156High8.42026-10-06A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The c…
CVE-2026-102160High7.22026-10-06An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup…
CVE-2026-102156Medium6.82026-10-06Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexi…
CVE-2026-102158Medium6.52026-10-06Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform S…
CVE-2026-102157Medium5.92026-10-06An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific at…