by Kastro
Paper/Archive/CVE-2026-102159

CVE-2026-102159

Arista Networks CloudVision CUE — Security Advisory 0190

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 30.1.301 × 206.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services.

Affected

ProductAffectedFixed inSource
CloudVision CUE2022.3.0 – 2026.2.0–CNA

Scores by source

Arista (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Arista (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryarista.com/en/support/advisories-notices/security-advisory/24806-security-advisory-0190