SQL Injection Vulnerability in Arista Networks CloudVision API
CVE-2026-102158

7.1HIGH

Key Information:

Vendor

Arista Networks

Status
Cloudvision Cue
Vendor
CVE Published:
6 October 2026

What is CVE-2026-102158?

An improper validation issue in the CloudVision CUE API allows authenticated network users to exploit parameters in API requests, leading to possible SQL injection attacks. This vulnerability could affect the backend system's availability, potentially allowing unauthorized access or manipulation of data.

Affected Version(s)

CloudVision CUE CloudVision CUE on-premises, virtual appliance or physical appliance 2022.2.0 <= 2026.2.0

References

https://www.arista.com/en/support/advisories-notices/secu...
vendor-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.