{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-101158",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T19:51:37.462404Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-06T19:51:46.864Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "CloudVision Portal on-premises, virtual appliance or physical appliance",
            "CV-CUE on-premises"
          ],
          "product": "CloudVision Portal",
          "vendor": "Arista Networks",
          "versions": [
            {
              "status": "affected",
              "version": "2026.2.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2026.1.2",
              "status": "affected",
              "version": "2026.1.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "2025.3.3",
              "status": "affected",
              "version": "2025.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "2025.3.0",
              "status": "affected",
              "version": "1.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.\u003c/p\u003e"
            }
          ],
          "value": "No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user\u0027s web session, potentially granting full access to their account and administrative permissions.\u003c/p\u003e"
            }
          ],
          "value": "A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user\u0027s web session, potentially granting full access to their account and administrative permissions."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-86",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-86 XSS Using HTTP Query Strings"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T19:36:51.571Z",
        "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
        "shortName": "Arista"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24801-security-advisory-0185"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCVE-2026-101158 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases in the 2026.2.x train\u003c/li\u003e\u003cli\u003e2026.1.3 and later releases in the 2026.1.x train\u003c/li\u003e\u003cli\u003e2025.3.4 and later releases in the 2025.3.x train\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "CVE-2026-101158 has been fixed in the following releases:\n- 2026.2.1 and later releases in the 2026.2.x train\n- 2026.1.3 and later releases in the 2026.1.x train\n- 2025.3.4 and later releases in the 2025.3.x train"
        }
      ],
      "source": {
        "advisory": "Security Advisory 0185",
        "defects": [
          "BUG 1867488"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Security Advisory 0185",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThere is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \"Read and Write\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to \u003cstrong\u003eSettings \u2192 Roles\u003c/strong\u003e to review role permissions, and \u003cstrong\u003eSettings \u2192 Users\u003c/strong\u003e to ensure only trusted users are assigned to those roles.\u003c/p\u003e"
            }
          ],
          "value": "There is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \"Read and Write\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to Settings \u2192 Roles to review role permissions, and Settings \u2192 Users to ensure only trusted users are assigned to those roles."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
    "assignerShortName": "Arista",
    "cveId": "CVE-2026-101158",
    "datePublished": "2026-10-06T19:36:51.571Z",
    "dateReserved": "2026-09-28T08:30:31.035Z",
    "dateUpdated": "2026-10-06T19:51:46.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"cna\": {\"providerMetadata\": {\"orgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"shortName\": \"Arista\", \"dateUpdated\": \"2026-10-06T19:36:51.571Z\"}, \"title\": \"Security Advisory 0185\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user\u0027s web session, potentially granting full access to their account and administrative permissions.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cp\u003eA missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user\u0027s web session, potentially granting full access to their account and administrative permissions.\u003c/p\u003e\"}]}], \"affected\": [{\"vendor\": \"Arista Networks\", \"product\": \"CloudVision Portal\", \"platforms\": [\"CloudVision Portal on-premises, virtual appliance or physical appliance\", \"CV-CUE on-premises\"], \"defaultStatus\": \"unaffected\", \"versions\": [{\"version\": \"2026.2.0\", \"status\": \"affected\", \"versionType\": \"custom\"}, {\"version\": \"2026.1.0\", \"lessThanOrEqual\": \"2026.1.2\", \"status\": \"affected\", \"versionType\": \"custom\"}, {\"version\": \"2025.3.0\", \"lessThanOrEqual\": \"2025.3.3\", \"status\": \"affected\", \"versionType\": \"custom\"}, {\"version\": \"1.0.0\", \"lessThan\": \"2025.3.0\", \"status\": \"affected\", \"versionType\": \"custom\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}], \"cvssV3_1\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H\", \"baseScore\": 8.4, \"baseSeverity\": \"HIGH\"}}, {\"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}], \"cvssV4_0\": {\"version\": \"4.0\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H\", \"baseScore\": 9.3, \"baseSeverity\": \"CRITICAL\"}}], \"problemTypes\": [{\"descriptions\": [{\"type\": \"CWE\", \"cweId\": \"CWE-79\", \"lang\": \"en\", \"description\": \"CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)\"}]}], \"impacts\": [{\"capecId\": \"CAPEC-86\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-86 XSS Using HTTP Query Strings\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cp\u003eNo specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.\u003c/p\u003e\"}]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"There is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \\\"Read and Write\\\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to Settings \\u2192 Roles to review role permissions, and Settings \\u2192 Users to ensure only trusted users are assigned to those roles.\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cp\u003eThere is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \\\"Read and Write\\\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to \u003cstrong\u003eSettings \\u2192 Roles\u003c/strong\u003e to review role permissions, and \u003cstrong\u003eSettings \\u2192 Users\u003c/strong\u003e to ensure only trusted users are assigned to those roles.\u003c/p\u003e\"}]}], \"solutions\": [{\"lang\": \"en\", \"value\": \"CVE-2026-101158 has been fixed in the following releases:\\n- 2026.2.1 and later releases in the 2026.2.x train\\n- 2026.1.3 and later releases in the 2026.1.x train\\n- 2025.3.4 and later releases in the 2025.3.x train\", \"supportingMedia\": [{\"type\": \"text/html\", \"base64\": false, \"value\": \"\u003cp\u003eCVE-2026-101158 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases in the 2026.2.x train\u003c/li\u003e\u003cli\u003e2026.1.3 and later releases in the 2026.1.x train\u003c/li\u003e\u003cli\u003e2025.3.4 and later releases in the 2025.3.x train\u003c/li\u003e\u003c/ul\u003e\"}]}], \"references\": [{\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisory/24801-security-advisory-0185\", \"tags\": [\"vendor-advisory\"]}], \"source\": {\"advisory\": \"Security Advisory 0185\", \"discovery\": \"INTERNAL\", \"defects\": [\"BUG 1867488\"]}}, \"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-101158\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-06T19:51:37.462404Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-06T19:51:42.687Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-101158\", \"assignerOrgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"Arista\", \"dateReserved\": \"2026-09-28T08:30:31.035Z\", \"datePublished\": \"2026-10-06T19:36:51.571Z\", \"dateUpdated\": \"2026-10-06T19:51:46.864Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}