Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-102159 EUVD-2026-93956GHSA-4pc8-pcf6-c2c3

Security Advisory 0190

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Arista

Description

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services.

Affected products

VendorProductAffectedFixed
Arista Networks CloudVision CUE 2022.3.0 – ≤ 2026.2.0 —

References