CVE-2026-102156: Arista Networks Cloudvision Cue

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service.

Affected products

• Arista Networks Cloudvision Cue: from 2021.2.0, up to and including 2026.2.0

Published 2026-10-06. Last modified 2026-10-07.