CVE-2026-102159: Arista Networks Cloudvision Cue

Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days.

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services.

Affected products

• Arista Networks Cloudvision Cue: from 2022.3.0, up to and including 2026.2.0

Published 2026-10-06. Last modified 2026-10-07.