{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101157",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T20:05:27.586474Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-06T20:05:36.991Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "CloudVision CUE on-premises, virtual appliance or physical appliance"
          ],
          "product": "CloudVision CUE",
          "vendor": "Arista Networks",
          "versions": [
            {
              "lessThanOrEqual": "2026.2.0",
              "status": "affected",
              "version": "2021.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eTo be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \u003ccode\u003ecvpi status aware\u003c/code\u003e:\u003c/p\u003e\u003cpre\u003e[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0\u003c/pre\u003e"
            }
          ],
          "value": "To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \"cvpi status aware\":\n\n[root@]# cvpi status aware\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\nsecondary components total:1 running:1 disabled:0\ntertiary components total:1 running:1 disabled:0"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim\u0027s authenticated browser session, access sensitive data, modify system state, or disrupt affected services.\u003c/p\u003e"
            }
          ],
          "value": "A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim\u0027s authenticated browser session, access sensitive data, modify system state, or disrupt affected services."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-86",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-86 XSS Using HTTP Query Strings"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T19:40:29.387Z",
        "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
        "shortName": "Arista"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCVE-2026-101157 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "CVE-2026-101157 has been fixed in the following releases:\n- 2026.2.1 and later releases"
        }
      ],
      "source": {
        "advisory": "Security Advisory 0192",
        "defects": [
          "BUG 1802841"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Security Advisory 0192",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThere is no mitigation or workaround available for this issue.\u003c/p\u003e"
            }
          ],
          "value": "There is no mitigation or workaround available for this issue."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
    "assignerShortName": "Arista",
    "cveId": "CVE-2026-101157",
    "datePublished": "2026-10-06T19:40:29.387Z",
    "dateReserved": "2026-09-28T08:30:31.034Z",
    "dateUpdated": "2026-10-06T20:05:36.991Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-101157\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-06T20:05:27.586474Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-06T20:05:32.923Z\"}}], \"cna\": {\"title\": \"Security Advisory 0192\", \"source\": {\"defects\": [\"BUG 1802841\"], \"advisory\": \"Security Advisory 0192\", \"discovery\": \"INTERNAL\"}, \"impacts\": [{\"capecId\": \"CAPEC-86\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-86 XSS Using HTTP Query Strings\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 8.7, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 9.3, \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Arista Networks\", \"product\": \"CloudVision CUE\", \"versions\": [{\"status\": \"affected\", \"version\": \"2021.2.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2026.2.0\"}], \"platforms\": [\"CloudVision CUE on-premises, virtual appliance or physical appliance\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"CVE-2026-101157 has been fixed in the following releases:\\n- 2026.2.1 and later releases\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eCVE-2026-101157 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases\u003c/li\u003e\u003c/ul\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"There is no mitigation or workaround available for this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThere is no mitigation or workaround available for this issue.\u003c/p\u003e\", \"base64\": false}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim\u0027s authenticated browser session, access sensitive data, modify system state, or disrupt affected services.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eA stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim\u0027s authenticated browser session, access sensitive data, modify system state, or disrupt affected services.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-79\", \"description\": \"CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"To be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \\\"cvpi status aware\\\":\\n\\n[root@]# cvpi status aware\\nExecuting command. This may take some time...\\nCompleted 1/1 discovered actions\\nprimary components total:1 running:1 disabled:0\\nsecondary components total:1 running:1 disabled:0\\ntertiary components total:1 running:1 disabled:0\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eTo be vulnerable, CV-CUE UI must be enabled and running. The status can be audited with the command \u003ccode\u003ecvpi status aware\u003c/code\u003e:\u003c/p\u003e\u003cpre\u003e[root@]# cvpi status aware\\nExecuting command. This may take some time...\\nCompleted 1/1 discovered actions\\nprimary components total:1 running:1 disabled:0\\nsecondary components total:1 running:1 disabled:0\\ntertiary components total:1 running:1 disabled:0\u003c/pre\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"shortName\": \"Arista\", \"dateUpdated\": \"2026-10-06T19:40:29.387Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-101157\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-10-06T20:05:36.991Z\", \"dateReserved\": \"2026-09-28T08:30:31.034Z\", \"assignerOrgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"datePublished\": \"2026-10-06T19:40:29.387Z\", \"assignerShortName\": \"Arista\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}