CVE-2026-102158CWE-74

CVE-2026-102158

Medium · published October 7, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00285 · 19.9th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2026-10-07T00:17Z
References (1)
https://www.arista.com/en/support/advisories-notices/security-advisory/24806-security-advisory-0190 · [email protected]
EPSS history
Timeline
  • 08 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 06 OCT 19:39Z
    Security Advisory 0190
    cvelistv5