{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101150",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T19:50:37.698532Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-06T19:50:49.110Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "CloudVision Portal, virtual appliance or physical appliance"
          ],
          "product": "CloudVision Portal",
          "vendor": "Arista Networks",
          "versions": [
            {
              "status": "affected",
              "version": "2026.2.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2026.1.2",
              "status": "affected",
              "version": "2026.1.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2025.3.3",
              "status": "affected",
              "version": "2025.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "2025.3.0",
              "status": "affected",
              "version": "2023.3.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn order to be vulnerable to CVE-2026-101150, OAuth SSO must be configured and \u003cstrong\u003eAllow Bearer Token Login\u003c/strong\u003e must be enabled in cluster management settings. To verify, navigate to \u003cstrong\u003eGeneral Settings \u2192 Cluster Management\u003c/strong\u003e. If the \u003cem\u003eAllow Bearer Token Login\u003c/em\u003e toggle is disabled, there is no exposure to this issue.\u003c/p\u003e"
            }
          ],
          "value": "In order to be vulnerable to CVE-2026-101150, OAuth SSO must be configured and Allow Bearer Token Login must be enabled in cluster management settings. To verify, navigate to General Settings \u2192 Cluster Management. If the \"Allow Bearer Token Login\" toggle is disabled, there is no exposure to this issue."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eInsufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.\u003c/p\u003e"
            }
          ],
          "value": "Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-664",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-664 Server-Side Request Forgery"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918 Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T19:37:25.747Z",
        "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
        "shortName": "Arista"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24802-security-advisory-0186"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCVE-2026-101150 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases in the 2026.2.x train\u003c/li\u003e\u003cli\u003e2026.1.3 and later releases in the 2026.1.x train\u003c/li\u003e\u003cli\u003e2025.3.4 and later releases in the 2025.3.x train\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "CVE-2026-101150 has been fixed in the following releases:\n- 2026.2.1 and later releases in the 2026.2.x train\n- 2026.1.3 and later releases in the 2026.1.x train\n- 2025.3.4 and later releases in the 2025.3.x train"
        }
      ],
      "source": {
        "advisory": "Security Advisory 0186",
        "defects": [
          "BUG 1919438"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Security Advisory 0186",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThere is no configuration-based mitigation for this issue. However, operators can consider switching to an alternative non-OIDC SSO login method, if feasible. Additionally, restrict AAA settings and Account Management configuration permissions to trusted personnel only.\u003c/p\u003e"
            }
          ],
          "value": "There is no configuration-based mitigation for this issue. However, operators can consider switching to an alternative non-OIDC SSO login method, if feasible. Additionally, restrict AAA settings and Account Management configuration permissions to trusted personnel only."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
    "assignerShortName": "Arista",
    "cveId": "CVE-2026-101150",
    "datePublished": "2026-10-06T19:37:25.747Z",
    "dateReserved": "2026-09-28T08:30:31.034Z",
    "dateUpdated": "2026-10-06T19:50:49.110Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-101150\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-06T19:50:37.698532Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-06T19:50:43.912Z\"}}], \"cna\": {\"title\": \"Security Advisory 0186\", \"source\": {\"defects\": [\"BUG 1919438\"], \"advisory\": \"Security Advisory 0186\", \"discovery\": \"INTERNAL\"}, \"impacts\": [{\"capecId\": \"CAPEC-664\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-664 Server-Side Request Forgery\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 4.1, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 5.1, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Arista Networks\", \"product\": \"CloudVision Portal\", \"versions\": [{\"status\": \"affected\", \"version\": \"2026.2.0\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"2026.1.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2026.1.2\"}, {\"status\": \"affected\", \"version\": \"2025.3.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2025.3.3\"}, {\"status\": \"affected\", \"version\": \"2023.3.0\", \"lessThan\": \"2025.3.0\", \"versionType\": \"custom\"}], \"platforms\": [\"CloudVision Portal, virtual appliance or physical appliance\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"CVE-2026-101150 has been fixed in the following releases:\\n- 2026.2.1 and later releases in the 2026.2.x train\\n- 2026.1.3 and later releases in the 2026.1.x train\\n- 2025.3.4 and later releases in the 2025.3.x train\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eCVE-2026-101150 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases in the 2026.2.x train\u003c/li\u003e\u003cli\u003e2026.1.3 and later releases in the 2026.1.x train\u003c/li\u003e\u003cli\u003e2025.3.4 and later releases in the 2025.3.x train\u003c/li\u003e\u003c/ul\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisory/24802-security-advisory-0186\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"There is no configuration-based mitigation for this issue. However, operators can consider switching to an alternative non-OIDC SSO login method, if feasible. Additionally, restrict AAA settings and Account Management configuration permissions to trusted personnel only.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThere is no configuration-based mitigation for this issue. However, operators can consider switching to an alternative non-OIDC SSO login method, if feasible. Additionally, restrict AAA settings and Account Management configuration permissions to trusted personnel only.\u003c/p\u003e\", \"base64\": false}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eInsufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-918\", \"description\": \"CWE-918 Server-Side Request Forgery (SSRF)\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"In order to be vulnerable to CVE-2026-101150, OAuth SSO must be configured and Allow Bearer Token Login must be enabled in cluster management settings. To verify, navigate to General Settings \\u2192 Cluster Management. If the \\\"Allow Bearer Token Login\\\" toggle is disabled, there is no exposure to this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eIn order to be vulnerable to CVE-2026-101150, OAuth SSO must be configured and \u003cstrong\u003eAllow Bearer Token Login\u003c/strong\u003e must be enabled in cluster management settings. To verify, navigate to \u003cstrong\u003eGeneral Settings \\u2192 Cluster Management\u003c/strong\u003e. If the \u003cem\u003eAllow Bearer Token Login\u003c/em\u003e toggle is disabled, there is no exposure to this issue.\u003c/p\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"shortName\": \"Arista\", \"dateUpdated\": \"2026-10-06T19:37:25.747Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-101150\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-10-06T19:50:49.110Z\", \"dateReserved\": \"2026-09-28T08:30:31.034Z\", \"assignerOrgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"datePublished\": \"2026-10-06T19:37:25.747Z\", \"assignerShortName\": \"Arista\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}