CVE-2026-101155

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: Arista Networks, Inc.

Description

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-101155

EUVD

EUVD-2026-93951

Affected Vendors & Products

Vendor	Product	Version / Range
Arista	Networks	CloudVision Portal 2026.2.0
Arista	Networks	CloudVision Portal 2026.1.0
Arista	Networks	CloudVision Portal 2025.3.0
Arista	Networks	CloudVision Portal 2024.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-22	The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

Executive Summary

This vulnerability allows an authenticated remote attacker with specific permissions to read or write files on the platform filesystem beyond the intended scope. It is exploited through specially crafted requests or crafted file uploads to the Software Management Studio Software Repository.

Detection Guidance

Detecting this vulnerability requires monitoring for unauthorized file access or modification attempts. Check logs for unusual file read/write operations in the Software Management Studio Software Repository. Inspect network traffic for crafted requests targeting file system paths. Validate file uploads for unexpected content or paths.

Impact Analysis

An attacker could access sensitive files, modify critical system files, or upload malicious files, potentially leading to data breaches, system compromise, or further network infiltration.

Compliance Impact

This vulnerability could lead to unauthorized access or disclosure of personal or sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality.

Mitigation Strategies

Restrict user permissions to the minimum required for their roles to limit potential access. Review and validate all file uploads to the Software Management Studio Software Repository for malicious content. Monitor filesystem access logs for unusual activity.

Hi! I’m here to help you understand CVE-2026-101155. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70