CVE-2026-102156

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-102156", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-09-28T17:41:09.358Z", "datePublished": "2026-10-06T19:40:28.369Z", "dateUpdated": "2026-10-06T20:04:33.983Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:40:28.369Z"}, "title": "Security Advisory 0191", "descriptions": [{"lang": "en", "value": "Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision CUE", "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "defaultStatus": "unaffected", "versions": [{"version": "2021.2.0", "lessThanOrEqual": "2026.2.0", "status": "affected", "versionType": "custom"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "baseScore": 6.8, "baseSeverity": "MEDIUM"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N", "baseScore": 6.9, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-74", "lang": "en", "description": "CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"}]}], "impacts": [{"capecId": "CAPEC-136", "descriptions": [{"lang": "en", "value": "CAPEC-136 LDAP Injection"}]}], "configurations": [{"lang": "en", "value": "Both of the following conditions must be met:\n1. CV-CUE backend (wifimanager) must be enabled and running.\n2. LDAP authentication must be enabled for the User Accounts.\n\nTo inspect the status of wifimanager:\n[root@]# cvpi status wifimanager\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Both of the following conditions must be met:</p><ol><li>CV-CUE backend (wifimanager) must be enabled and running.</li><li>LDAP authentication must be enabled for the User Accounts.</li></ol><p>To inspect the status of wifimanager:</p><pre>[root@]# cvpi status wifimanager\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0</pre>"}]}], "workarounds": [{"lang": "en", "value": "The recommended mitigation is to disable LDAP Authentication. Prior to implementing this, please ensure that an alternative authentication mechanism is properly configured and verified, as disabling LDAP authentication will prevent LDAP-dependent users from accessing or managing CV-CUE.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The recommended mitigation is to disable LDAP Authentication. Prior to implementing this, please ensure that an alternative authentication mechanism is properly configured and verified, as disabling LDAP authentication will prevent LDAP-dependent users from accessing or managing CV-CUE.</p>"}]}], "solutions": [{"lang": "en", "value": "CVE-2026-102156 has been fixed in the following releases:\n- 2026.2.1 and later releases", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>CVE-2026-102156 has been fixed in the following releases:</p><ul><li>2026.2.1 and later releases</li></ul>"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24807-security-advisory-0191", "tags": ["vendor-advisory"]}], "source": {"advisory": "Security Advisory 0191", "discovery": "INTERNAL", "defects": ["BUG 1731907"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-06T20:04:24.354512Z", "id": "CVE-2026-102156", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T20:04:33.983Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-102156", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-06T20:04:24.354512Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-06T20:04:28.954Z"}}], "cna": {"title": "Security Advisory 0191", "source": {"defects": ["BUG 1731907"], "advisory": "Security Advisory 0191", "discovery": "INTERNAL"}, "impacts": [{"capecId": "CAPEC-136", "descriptions": [{"lang": "en", "value": "CAPEC-136 LDAP Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 6.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Arista Networks", "product": "CloudVision CUE", "versions": [{"status": "affected", "version": "2021.2.0", "versionType": "custom", "lessThanOrEqual": "2026.2.0"}], "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "CVE-2026-102156 has been fixed in the following releases:\n- 2026.2.1 and later releases", "supportingMedia": [{"type": "text/html", "value": "<p>CVE-2026-102156 has been fixed in the following releases:</p><ul><li>2026.2.1 and later releases</li></ul>", "base64": false}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24807-security-advisory-0191", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "The recommended mitigation is to disable LDAP Authentication. Prior to implementing this, please ensure that an alternative authentication mechanism is properly configured and verified, as disabling LDAP authentication will prevent LDAP-dependent users from accessing or managing CV-CUE.", "supportingMedia": [{"type": "text/html", "value": "<p>The recommended mitigation is to disable LDAP Authentication. Prior to implementing this, please ensure that an alternative authentication mechanism is properly configured and verified, as disabling LDAP authentication will prevent LDAP-dependent users from accessing or managing CV-CUE.</p>", "base64": false}]}], "descriptions": [{"lang": "en", "value": "Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.", "supportingMedia": [{"type": "text/html", "value": "<p>Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-74", "description": "CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"}]}], "configurations": [{"lang": "en", "value": "Both of the following conditions must be met:\n1. CV-CUE backend (wifimanager) must be enabled and running.\n2. LDAP authentication must be enabled for the User Accounts.\n\nTo inspect the status of wifimanager:\n[root@]# cvpi status wifimanager\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0", "supportingMedia": [{"type": "text/html", "value": "<p>Both of the following conditions must be met:</p><ol><li>CV-CUE backend (wifimanager) must be enabled and running.</li><li>LDAP authentication must be enabled for the User Accounts.</li></ol><p>To inspect the status of wifimanager:</p><pre>[root@]# cvpi status wifimanager\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0</pre>", "base64": false}]}], "providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-10-06T19:40:28.369Z"}}}, "cveMetadata": {"cveId": "CVE-2026-102156", "state": "PUBLISHED", "dateUpdated": "2026-10-06T20:04:33.983Z", "dateReserved": "2026-09-28T17:41:09.358Z", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "datePublished": "2026-10-06T19:40:28.369Z", "assignerShortName": "Arista"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["CloudVision CUE on-premises, virtual appliance or physical appliance"], "product": "CloudVision CUE", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "2026.2.0", "status": "affected", "version": "2021.2.0", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service."}], "id": "CVE-2026-102156", "lastModified": "2026-10-07T13:38:48.657", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 4.0, "source": "psirt@arista.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-102156", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-06T20:04:24.354512Z", "version": "2.0.3"}}]}, "published": "2026-10-06T20:17:10.547", "references": [{"source": "psirt@arista.com", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24807-security-advisory-0191"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-74"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["cloudvision_cue_on-premises,_virtual_appliance_or_physical_appliance"], "status": "affected", "versions": {"scheme": "semver", "value": "[2021.2.0,2026.2.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "CloudVision CUE", "source": "cna", "vendor": "Arista Networks"}, "product": "cloudvision_cue", "vendor": "arista"}], "created": "2026-10-06T23:30:08.285778+00:00", "title": "LDAP Query Injection Vulnerability in Arista CloudVision CUE", "updated": "2026-10-09T08:32:30.441169+00:00", "vendors": ["arista", "arista$PRODUCT$cloudvision_cue"]}