{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-102156",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-06T20:04:24.354512Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-06T20:04:33.983Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "CloudVision CUE on-premises, virtual appliance or physical appliance"
          ],
          "product": "CloudVision CUE",
          "vendor": "Arista Networks",
          "versions": [
            {
              "lessThanOrEqual": "2026.2.0",
              "status": "affected",
              "version": "2021.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eBoth of the following conditions must be met:\u003c/p\u003e\u003col\u003e\u003cli\u003eCV-CUE backend (wifimanager) must be enabled and running.\u003c/li\u003e\u003cli\u003eLDAP authentication must be enabled for the User Accounts.\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eTo inspect the status of wifimanager:\u003c/p\u003e\u003cpre\u003e[root@]# cvpi status wifimanager\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0\u003c/pre\u003e"
            }
          ],
          "value": "Both of the following conditions must be met:\n1. CV-CUE backend (wifimanager) must be enabled and running.\n2. LDAP authentication must be enabled for the User Accounts.\n\nTo inspect the status of wifimanager:\n[root@]# cvpi status wifimanager\nExecuting command. This may take some time...\nCompleted 1/1 discovered actions\nprimary components total:1 running:1 disabled:0"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eImproper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.\u003c/p\u003e"
            }
          ],
          "value": "Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-136",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-136 LDAP Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N",
            "version": "4.0"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-74",
              "description": "CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-06T19:40:28.369Z",
        "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
        "shortName": "Arista"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24807-security-advisory-0191"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCVE-2026-102156 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "CVE-2026-102156 has been fixed in the following releases:\n- 2026.2.1 and later releases"
        }
      ],
      "source": {
        "advisory": "Security Advisory 0191",
        "defects": [
          "BUG 1731907"
        ],
        "discovery": "INTERNAL"
      },
      "title": "Security Advisory 0191",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe recommended mitigation is to disable LDAP Authentication. Prior to implementing this, please ensure that an alternative authentication mechanism is properly configured and verified, as disabling LDAP authentication will prevent LDAP-dependent users from accessing or managing CV-CUE.\u003c/p\u003e"
            }
          ],
          "value": "The recommended mitigation is to disable LDAP Authentication. Prior to implementing this, please ensure that an alternative authentication mechanism is properly configured and verified, as disabling LDAP authentication will prevent LDAP-dependent users from accessing or managing CV-CUE."
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
    "assignerShortName": "Arista",
    "cveId": "CVE-2026-102156",
    "datePublished": "2026-10-06T19:40:28.369Z",
    "dateReserved": "2026-09-28T17:41:09.358Z",
    "dateUpdated": "2026-10-06T20:04:33.983Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-102156\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-10-06T20:04:24.354512Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-10-06T20:04:28.954Z\"}}], \"cna\": {\"title\": \"Security Advisory 0191\", \"source\": {\"defects\": [\"BUG 1731907\"], \"advisory\": \"Security Advisory 0191\", \"discovery\": \"INTERNAL\"}, \"impacts\": [{\"capecId\": \"CAPEC-136\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-136 LDAP Injection\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"version\": \"3.1\", \"baseScore\": 6.8, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 6.9, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Arista Networks\", \"product\": \"CloudVision CUE\", \"versions\": [{\"status\": \"affected\", \"version\": \"2021.2.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2026.2.0\"}], \"platforms\": [\"CloudVision CUE on-premises, virtual appliance or physical appliance\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"CVE-2026-102156 has been fixed in the following releases:\\n- 2026.2.1 and later releases\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eCVE-2026-102156 has been fixed in the following releases:\u003c/p\u003e\u003cul\u003e\u003cli\u003e2026.2.1 and later releases\u003c/li\u003e\u003c/ul\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisory/24807-security-advisory-0191\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"The recommended mitigation is to disable LDAP Authentication. Prior to implementing this, please ensure that an alternative authentication mechanism is properly configured and verified, as disabling LDAP authentication will prevent LDAP-dependent users from accessing or managing CV-CUE.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThe recommended mitigation is to disable LDAP Authentication. Prior to implementing this, please ensure that an alternative authentication mechanism is properly configured and verified, as disabling LDAP authentication will prevent LDAP-dependent users from accessing or managing CV-CUE.\u003c/p\u003e\", \"base64\": false}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eImproper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-74\", \"description\": \"CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"Both of the following conditions must be met:\\n1. CV-CUE backend (wifimanager) must be enabled and running.\\n2. LDAP authentication must be enabled for the User Accounts.\\n\\nTo inspect the status of wifimanager:\\n[root@]# cvpi status wifimanager\\nExecuting command. This may take some time...\\nCompleted 1/1 discovered actions\\nprimary components total:1 running:1 disabled:0\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eBoth of the following conditions must be met:\u003c/p\u003e\u003col\u003e\u003cli\u003eCV-CUE backend (wifimanager) must be enabled and running.\u003c/li\u003e\u003cli\u003eLDAP authentication must be enabled for the User Accounts.\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eTo inspect the status of wifimanager:\u003c/p\u003e\u003cpre\u003e[root@]# cvpi status wifimanager\\nExecuting command. This may take some time...\\nCompleted 1/1 discovered actions\\nprimary components total:1 running:1 disabled:0\u003c/pre\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"shortName\": \"Arista\", \"dateUpdated\": \"2026-10-06T19:40:28.369Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-102156\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-10-06T20:04:33.983Z\", \"dateReserved\": \"2026-09-28T17:41:09.358Z\", \"assignerOrgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"datePublished\": \"2026-10-06T19:40:28.369Z\", \"assignerShortName\": \"Arista\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}