CVE-2026-101152

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: Arista Networks, Inc.

Description

Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider (IdP) to deliver authentication material to an attacker-controlled URL instead of to CloudVision.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101152

EUVD

EUVD-2026-93948

Affected Vendors & Products

Vendor	Product	Version / Range
Arista	Networks	CloudVision Portal 2026.2.0
Arista	Networks	CloudVision Portal 2026.1.0
Arista	Networks	CloudVision Portal 2025.3.0
Arista	Networks	CloudVision Portal 2021.1.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-601	The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

Attack-Flow Graph

Executive Summary

This vulnerability involves insufficient validation in the Single Sign-On (SSO) login flow. A remote, unauthenticated attacker can craft a malicious URL that, when clicked by a user, tricks the identity provider (IdP) into sending authentication material to an attacker-controlled URL instead of the legitimate CloudVision portal.

Detection Guidance

This vulnerability involves insufficient validation in the SSO login flow that could redirect authentication material to an attacker-controlled URL. Detection requires reviewing SSO configuration logs for unusual URL redirections or unexpected authentication requests. Check CloudVision Portal access logs for requests to unknown or external domains during login attempts.

Impact Analysis

An attacker could steal authentication credentials or session tokens, gaining unauthorized access to CloudVision and potentially sensitive data or system controls. Users clicking the malicious link may unknowingly expose their credentials to attackers.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access control. Organizations may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Immediately review and update SSO login flow validation to ensure authentication material is only delivered to trusted URLs. Disable or restrict SSO login flows until patches are applied. Monitor network traffic for unusual authentication requests or redirects.

Hi! I’m here to help you understand CVE-2026-101152. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70