CVE-2026-102158 — Security Advisory 0190

CVE-2026-102158

Security Advisory 0190 PUBLISHED

Description (CNA)

Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability.

Affected (CNA)

Vendor / product	Versions
Arista Networks / CloudVision CUE	affected 2022.2.0 through 2026.2.0

CWE

CWE-74

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24806-security-advisory-0190

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.