CVE-2026-101158

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-101158", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-09-28T08:30:31.035Z", "datePublished": "2026-10-06T19:36:51.571Z", "dateUpdated": "2026-10-06T19:51:46.864Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:36:51.571Z"}, "title": "Security Advisory 0185", "descriptions": [{"lang": "en", "value": "A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision Portal", "platforms": ["CloudVision Portal on-premises, virtual appliance or physical appliance", "CV-CUE on-premises"], "defaultStatus": "unaffected", "versions": [{"version": "2026.2.0", "status": "affected", "versionType": "custom"}, {"version": "2026.1.0", "lessThanOrEqual": "2026.1.2", "status": "affected", "versionType": "custom"}, {"version": "2025.3.0", "lessThanOrEqual": "2025.3.3", "status": "affected", "versionType": "custom"}, {"version": "1.0.0", "lessThan": "2025.3.0", "status": "affected", "versionType": "custom"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.3, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "impacts": [{"capecId": "CAPEC-86", "descriptions": [{"lang": "en", "value": "CAPEC-86 XSS Using HTTP Query Strings"}]}], "configurations": [{"lang": "en", "value": "No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.</p>"}]}], "workarounds": [{"lang": "en", "value": "There is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \"Read and Write\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to Settings \u2192 Roles to review role permissions, and Settings \u2192 Users to ensure only trusted users are assigned to those roles.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>There is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \"Read and Write\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to <strong>Settings \u2192 Roles</strong> to review role permissions, and <strong>Settings \u2192 Users</strong> to ensure only trusted users are assigned to those roles.</p>"}]}], "solutions": [{"lang": "en", "value": "CVE-2026-101158 has been fixed in the following releases:\n- 2026.2.1 and later releases in the 2026.2.x train\n- 2026.1.3 and later releases in the 2026.1.x train\n- 2025.3.4 and later releases in the 2025.3.x train", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>CVE-2026-101158 has been fixed in the following releases:</p><ul><li>2026.2.1 and later releases in the 2026.2.x train</li><li>2026.1.3 and later releases in the 2026.1.x train</li><li>2025.3.4 and later releases in the 2025.3.x train</li></ul>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24801-security-advisory-0185", "tags": ["vendor-advisory"]}], "source": {"advisory": "Security Advisory 0185", "discovery": "INTERNAL", "defects": ["BUG 1867488"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-06T19:51:37.462404Z", "id": "CVE-2026-101158", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T19:51:46.864Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-101158", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-09-28T08:30:31.035Z", "datePublished": "2026-10-06T19:36:51.571Z", "dateUpdated": "2026-10-06T19:51:46.864Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:36:51.571Z"}, "title": "Security Advisory 0185", "descriptions": [{"lang": "en", "value": "A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision Portal", "platforms": ["CloudVision Portal on-premises, virtual appliance or physical appliance", "CV-CUE on-premises"], "defaultStatus": "unaffected", "versions": [{"version": "2026.2.0", "status": "affected", "versionType": "custom"}, {"version": "2026.1.0", "lessThanOrEqual": "2026.1.2", "status": "affected", "versionType": "custom"}, {"version": "2025.3.0", "lessThanOrEqual": "2025.3.3", "status": "affected", "versionType": "custom"}, {"version": "1.0.0", "lessThan": "2025.3.0", "status": "affected", "versionType": "custom"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "baseScore": 8.4, "baseSeverity": "HIGH"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "baseScore": 9.3, "baseSeverity": "CRITICAL"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-79", "lang": "en", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}], "impacts": [{"capecId": "CAPEC-86", "descriptions": [{"lang": "en", "value": "CAPEC-86 XSS Using HTTP Query Strings"}]}], "configurations": [{"lang": "en", "value": "No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.</p>"}]}], "workarounds": [{"lang": "en", "value": "There is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \"Read and Write\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to Settings \u2192 Roles to review role permissions, and Settings \u2192 Users to ensure only trusted users are assigned to those roles.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>There is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \"Read and Write\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to <strong>Settings \u2192 Roles</strong> to review role permissions, and <strong>Settings \u2192 Users</strong> to ensure only trusted users are assigned to those roles.</p>"}]}], "solutions": [{"lang": "en", "value": "CVE-2026-101158 has been fixed in the following releases:\n- 2026.2.1 and later releases in the 2026.2.x train\n- 2026.1.3 and later releases in the 2026.1.x train\n- 2025.3.4 and later releases in the 2025.3.x train", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>CVE-2026-101158 has been fixed in the following releases:</p><ul><li>2026.2.1 and later releases in the 2026.2.x train</li><li>2026.1.3 and later releases in the 2026.1.x train</li><li>2025.3.4 and later releases in the 2025.3.x train</li></ul>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24801-security-advisory-0185", "tags": ["vendor-advisory"]}], "source": {"advisory": "Security Advisory 0185", "discovery": "INTERNAL", "defects": ["BUG 1867488"]}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-101158", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-06T19:51:37.462404Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T19:51:42.687Z"}}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["CloudVision Portal on-premises, virtual appliance or physical appliance", "CV-CUE on-premises"], "product": "CloudVision Portal", "vendor": "Arista Networks", "versions": [{"status": "affected", "version": "2026.2.0", "versionType": "custom"}, {"lessThanOrEqual": "2026.1.2", "status": "affected", "version": "2026.1.0", "versionType": "custom"}, {"lessThanOrEqual": "2025.3.3", "status": "affected", "version": "2025.3.0", "versionType": "custom"}, {"lessThan": "2025.3.0", "status": "affected", "version": "1.0.0", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions."}], "id": "CVE-2026-101158", "lastModified": "2026-10-07T13:38:48.657", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.7, "impactScore": 6.0, "source": "psirt@arista.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-101158", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-06T19:51:37.462404Z", "version": "2.0.3"}}]}, "published": "2026-10-06T20:17:10.127", "references": [{"source": "psirt@arista.com", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24801-security-advisory-0185"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["cloudvision_portal_on-premises,_virtual_appliance_or_physical_appliance", "cv-cue_on-premises"], "status": "affected", "versions": {"scheme": "semver", "value": "2026.2.0"}}, {"platform": ["cloudvision_portal_on-premises,_virtual_appliance_or_physical_appliance", "cv-cue_on-premises"], "status": "affected", "versions": {"scheme": "semver", "value": "[2026.1.0,2026.1.2]"}}, {"platform": ["cloudvision_portal_on-premises,_virtual_appliance_or_physical_appliance", "cv-cue_on-premises"], "status": "affected", "versions": {"scheme": "semver", "value": "[2025.3.0,2025.3.3]"}}, {"platform": ["cloudvision_portal_on-premises,_virtual_appliance_or_physical_appliance", "cv-cue_on-premises"], "status": "affected", "versions": {"scheme": "semver", "value": "[1.0.0,2025.3.0)"}}], "enrichment": {"confidence": 85.0, "confidence_source": "matching", "scores": [{"score": 85.0, "source": "matching"}]}, "original": {"product": "CloudVision Portal", "source": "cna", "vendor": "Arista Networks"}, "product": "cloudvision_portal", "vendor": "arista"}], "created": "2026-10-06T20:30:05.838538+00:00", "title": "Stored XSS via File Upload in Arista CloudVision Portal", "updated": "2026-10-09T07:45:18.062673+00:00", "vendors": ["arista", "arista$PRODUCT$cloudvision_portal"]}