{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101156",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T20:04:54.409170Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-06T20:05:03.281Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "CloudVision CUE on-premises, virtual appliance or physical appliance"
          ],
          "product": "CloudVision CUE",
          "vendor": "Arista Networks",
          "versions": [
            {
              "lessThanOrEqual": "2026.2.0",
              "status": "affected",
              "version": "2025.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eTo be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \u003ccode\u003ecvpi status aware\u003c/code\u003e:\u003c/p\u003e\u003cpre\u003e[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0\u003c/pre\u003e"
            }
          ],
          "value": "To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \"cvpi status aware\":\n\n[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user\u0027s browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim\u0027s authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.\u003c/p\u003e"
            }
          ],
          "value": "A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user\u0027s browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim\u0027s authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-86",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-86 XSS Using HTTP Query Strings"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T19:40:28.902Z",
        "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
        "shortName": "Arista"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCVE-2026-101156 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "CVE-2026-101156 has been fixed in the following releases:\n- 2026.2.1 and later releases"
        }
      ],
      "source": {
        "advisory": "Security Advisory 0192",
        "defects": [
          "BUG 1782052"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Security Advisory 0192",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThere is no mitigation or workaround available for this issue.\u003c/p\u003e"
            }
          ],
          "value": "There is no mitigation or workaround available for this issue."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
    "assignerShortName": "Arista",
    "cveId": "CVE-2026-101156",
    "datePublished": "2026-10-06T19:40:28.902Z",
    "dateReserved": "2026-09-28T08:30:31.034Z",
    "dateUpdated": "2026-10-06T20:05:03.281Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-101156\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-06T20:04:54.409170Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-06T20:04:58.763Z\"}}], \"cna\": {\"title\": \"Security Advisory 0192\", \"source\": {\"defects\": [\"BUG 1782052\"], \"advisory\": \"Security Advisory 0192\", \"discovery\": \"INTERNAL\"}, \"impacts\": [{\"capecId\": \"CAPEC-86\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-86 XSS Using HTTP Query Strings\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 8.4, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 6.2, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Arista Networks\", \"product\": \"CloudVision CUE\", \"versions\": [{\"status\": \"affected\", \"version\": \"2025.2.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2026.2.0\"}], \"platforms\": [\"CloudVision CUE on-premises, virtual appliance or physical appliance\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"CVE-2026-101156 has been fixed in the following releases:\\n- 2026.2.1 and later releases\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eCVE-2026-101156 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases\u003c/li\u003e\u003c/ul\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"There is no mitigation or workaround available for this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThere is no mitigation or workaround available for this issue.\u003c/p\u003e\", \"base64\": false}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user\u0027s browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim\u0027s authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eA stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user\u0027s browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim\u0027s authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-79\", \"description\": \"CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \\\"cvpi status aware\\\":\\n\\n[root@]# cvpi status aware\\nExecuting command. This may take some time...\\nCompleted 1/1 discovered actions\\nprimary components total:1 running:1 disabled:0\\nsecondary components total:1 running:1 disabled:0\\ntertiary components total:1 running:1 disabled:0\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eTo be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \u003ccode\u003ecvpi status aware\u003c/code\u003e:\u003c/p\u003e\u003cpre\u003e[root@]# cvpi status aware\\nExecuting command. This may take some time...\\nCompleted 1/1 discovered actions\\nprimary components total:1 running:1 disabled:0\\nsecondary components total:1 running:1 disabled:0\\ntertiary components total:1 running:1 disabled:0\u003c/pre\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"shortName\": \"Arista\", \"dateUpdated\": \"2026-10-06T19:40:28.902Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-101156\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-10-06T20:05:03.281Z\", \"dateReserved\": \"2026-09-28T08:30:31.034Z\", \"assignerOrgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"datePublished\": \"2026-10-06T19:40:28.902Z\", \"assignerShortName\": \"Arista\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}