Cloudvision Cue (Arista Networks) - vulnerabilities (CVEs)

9 CVEs, 9 in the last 30 days, 1 known versions, newest CVE from 2026-10-06. Vendor: Arista Networks.

CVEs of Cloudvision Cue

CVE-2026-101157 - CVSS 9.3 (critical), 2026-10-06: A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes…
CVE-2026-101156 - CVSS 8.4 (high), 2026-10-06: A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The…
CVE-2026-102156 - CVSS 6.9 (medium), 2026-10-06: Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under…
CVE-2026-102161 - CVSS 8.8 (high), 2026-10-06: An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers)…
CVE-2026-102160 - CVSS 8.6 (high), 2026-10-06: An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup…
CVE-2026-102159 - CVSS 9.8 (critical), 2026-10-06: An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services.…
CVE-2026-102158 - CVSS 7.1 (high), 2026-10-06: Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform…
CVE-2026-102155 - CVSS 8.5 (high), 2026-10-06: An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests,…
CVE-2026-102157 - CVSS 6.8 (medium), 2026-10-06: An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific…