LDAP Input Manipulation Vulnerability in Arista Products
CVE-2026-102156

6.9MEDIUM

Key Information:

Vendor

Arista Networks

Status
Cloudvision Cue
Vendor
CVE Published:
6 October 2026

What is CVE-2026-102156?

A vulnerability in the Arista Network Operating System allows unauthenticated network attackers to manipulate Lightweight Directory Access Protocol (LDAP) authentication input. This flaw could enable attackers to inject malicious queries targeting the configured directory service. Exploitation requires specific conditions that increase complexity but poses a significant risk to system integrity.

Affected Version(s)

CloudVision CUE CloudVision CUE on-premises, virtual appliance or physical appliance 2021.2.0 <= 2026.2.0

References

https://www.arista.com/en/support/advisories-notices/secu...
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.