CVE-2026-101156

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-101156", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-09-28T08:30:31.034Z", "datePublished": "2026-10-06T19:40:28.902Z", "dateUpdated": "2026-10-06T20:05:03.281Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:40:28.902Z"}, "title": "Security Advisory 0192", "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision CUE", "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "defaultStatus": "unaffected", "versions": [{"version": "2025.2.0", "lessThanOrEqual": "2026.2.0", "status": "affected", "versionType": "custom"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H", "baseScore": 6.2, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "impacts": [{"capecId": "CAPEC-86", "descriptions": [{"lang": "en", "value": "CAPEC-86 XSS Using HTTP Query Strings"}]}], "configurations": [{"lang": "en", "value": "To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \"cvpi status aware\":\n\n[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command <code>cvpi status aware</code>:</p><pre>[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0</pre>"}]}], "workarounds": [{"lang": "en", "value": "There is no mitigation or workaround available for this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>There is no mitigation or workaround available for this issue.</p>"}]}], "solutions": [{"lang": "en", "value": "CVE-2026-101156 has been fixed in the following releases:\n- 2026.2.1 and later releases", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>CVE-2026-101156 has been fixed in the following releases:</p><ul><li>2026.2.1 and later releases</li></ul>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192", "tags": ["vendor-advisory"]}], "source": {"advisory": "Security Advisory 0192", "discovery": "INTERNAL", "defects": ["BUG 1782052"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-06T20:04:54.409170Z", "id": "CVE-2026-101156", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T20:05:03.281Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-101156", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-06T20:04:54.409170Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T20:04:58.763Z"}}], "cna": {"title": "Security Advisory 0192", "source": {"defects": ["BUG 1782052"], "advisory": "Security Advisory 0192", "discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-86", "descriptions": [{"lang": "en", "value": "CAPEC-86 XSS Using HTTP Query Strings"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 8.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 6.2, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision CUE", "versions": [{"status": "affected", "version": "2025.2.0", "versionType": "custom", "lessThanOrEqual": "2026.2.0"}], "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "CVE-2026-101156 has been fixed in the following releases:\n- 2026.2.1 and later releases", "supportingMedia": [{"type": "text/html", "value": "<p>CVE-2026-101156 has been fixed in the following releases:</p><ul><li>2026.2.1 and later releases</li></ul>", "base64": false}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "There is no mitigation or workaround available for this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>There is no mitigation or workaround available for this issue.</p>", "base64": false}]}], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.", "supportingMedia": [{"type": "text/html", "value": "<p>A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "configurations": [{"lang": "en", "value": "To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \"cvpi status aware\":\n\n[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0", "supportingMedia": [{"type": "text/html", "value": "<p>To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command <code>cvpi status aware</code>:</p><pre>[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0</pre>", "base64": false}]}], "providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:40:28.902Z"}}}, "cveMetadata": {"cveId": "CVE-2026-101156", "state": "PUBLISHED", "dateUpdated": "2026-10-06T20:05:03.281Z", "dateReserved": "2026-09-28T08:30:31.034Z", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "datePublished": "2026-10-06T19:40:28.902Z", "assignerShortName": "Arista"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "product": "CloudVision CUE", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "2026.2.0", "status": "affected", "version": "2025.2.0", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services."}], "id": "CVE-2026-101156", "lastModified": "2026-10-07T13:38:48.657", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 6.0, "source": "psirt@arista.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-101156", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-06T20:04:54.409170Z", "version": "2.0.3"}}]}, "published": "2026-10-06T20:17:09.837", "references": [{"source": "psirt@arista.com", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["cloudvision_cue_on-premises,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "[2025.2.0,2026.2.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "CloudVision CUE", "source": "cna", "vendor": "Arista Networks"}, "product": "cloudvision_cue", "vendor": "arista"}], "created": "2026-10-06T23:30:08.285642+00:00", "title": "Cross\u2011Site Scripting via Stored Configuration in Arista CloudVision CUE", "updated": "2026-10-09T08:32:27.816533+00:00", "vendors": ["arista", "arista$PRODUCT$cloudvision_cue"]}