Access Control Flaw in Arista CV-CUE Backend
CVE-2026-102159

9.3CRITICAL

Key Information:

Vendor

Arista Networks

Status
Cloudvision Cue
Vendor
CVE Published:
6 October 2026

What is CVE-2026-102159?

An access control flaw exists within Arista's CV-CUE backend that may permit an unauthenticated network attacker to gain access to features meant solely for internal services. If successfully exploited, this vulnerability could lead to the exposure of sensitive location data or the disruption of essential services.

Affected Version(s)

CloudVision CUE CloudVision CUE on-premises, virtual appliance or physical appliance 2022.3.0 <= 2026.2.0

References

https://www.arista.com/en/support/advisories-notices/secu...
vendor-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.