CVE-2026-101157

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-101157", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-09-28T08:30:31.034Z", "datePublished": "2026-10-06T19:40:29.387Z", "dateUpdated": "2026-10-06T20:05:36.991Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:40:29.387Z"}, "title": "Security Advisory 0192", "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated browser session, access sensitive data, modify system state, or disrupt affected services.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated browser session, access sensitive data, modify system state, or disrupt affected services.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision CUE", "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "defaultStatus": "unaffected", "versions": [{"version": "2021.2.0", "lessThanOrEqual": "2026.2.0", "status": "affected", "versionType": "custom"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L", "baseScore": 8.7, "baseSeverity": "HIGH"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L", "baseScore": 9.3, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "impacts": [{"capecId": "CAPEC-86", "descriptions": [{"lang": "en", "value": "CAPEC-86 XSS Using HTTP Query Strings"}]}], "configurations": [{"lang": "en", "value": "To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \"cvpi status aware\":\n\n[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command <code>cvpi status aware</code>:</p><pre>[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0</pre>"}]}], "workarounds": [{"lang": "en", "value": "There is no mitigation or workaround available for this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>There is no mitigation or workaround available for this issue.</p>"}]}], "solutions": [{"lang": "en", "value": "CVE-2026-101157 has been fixed in the following releases:\n- 2026.2.1 and later releases", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>CVE-2026-101157 has been fixed in the following releases:</p><ul><li>2026.2.1 and later releases</li></ul>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192", "tags": ["vendor-advisory"]}], "source": {"advisory": "Security Advisory 0192", "discovery": "INTERNAL", "defects": ["BUG 1802841"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-06T20:05:27.586474Z", "id": "CVE-2026-101157", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T20:05:36.991Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-101157", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-06T20:05:27.586474Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T20:05:32.923Z"}}], "cna": {"title": "Security Advisory 0192", "source": {"defects": ["BUG 1802841"], "advisory": "Security Advisory 0192", "discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-86", "descriptions": [{"lang": "en", "value": "CAPEC-86 XSS Using HTTP Query Strings"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 9.3, "baseSeverity": "CRITICAL", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision CUE", "versions": [{"status": "affected", "version": "2021.2.0", "versionType": "custom", "lessThanOrEqual": "2026.2.0"}], "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "CVE-2026-101157 has been fixed in the following releases:\n- 2026.2.1 and later releases", "supportingMedia": [{"type": "text/html", "value": "<p>CVE-2026-101157 has been fixed in the following releases:</p><ul><li>2026.2.1 and later releases</li></ul>", "base64": false}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "There is no mitigation or workaround available for this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>There is no mitigation or workaround available for this issue.</p>", "base64": false}]}], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated browser session, access sensitive data, modify system state, or disrupt affected services.", "supportingMedia": [{"type": "text/html", "value": "<p>A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated browser session, access sensitive data, modify system state, or disrupt affected services.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "configurations": [{"lang": "en", "value": "To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \"cvpi status aware\":\n\n[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0", "supportingMedia": [{"type": "text/html", "value": "<p>To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command <code>cvpi status aware</code>:</p><pre>[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0</pre>", "base64": false}]}], "providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:40:29.387Z"}}}, "cveMetadata": {"cveId": "CVE-2026-101157", "state": "PUBLISHED", "dateUpdated": "2026-10-06T20:05:36.991Z", "dateReserved": "2026-09-28T08:30:31.034Z", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "datePublished": "2026-10-06T19:40:29.387Z", "assignerShortName": "Arista"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "product": "CloudVision CUE", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "2026.2.0", "status": "affected", "version": "2021.2.0", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated browser session, access sensitive data, modify system state, or disrupt affected services."}], "id": "CVE-2026-101157", "lastModified": "2026-10-07T13:38:48.657", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "LOW", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 6.0, "source": "psirt@arista.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-101157", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-06T20:05:27.586474Z", "version": "2.0.3"}}]}, "published": "2026-10-06T20:17:09.983", "references": [{"source": "psirt@arista.com", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["cloudvision_cue_on-premises,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "[2021.2.0,2026.2.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "CloudVision CUE", "source": "cna", "vendor": "Arista Networks"}, "product": "cloudvision_cue", "vendor": "arista"}], "created": "2026-10-06T23:30:08.285458+00:00", "title": "Stored XSS in Arista CloudVision CUE Enables Session Compromise", "updated": "2026-10-09T08:32:25.762652+00:00", "vendors": ["arista", "arista$PRODUCT$cloudvision_cue"]}