CVE-2026-102161

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: Arista Networks, Inc.

Description

An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102161

EUVD

EUVD-2026-93958

Affected Vendors & Products

Vendor	Product	Version / Range
Arista	Networks	CloudVision CUE 2021.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-798	The product contains hard-coded credentials, such as a password or cryptographic key.
CWE-290	This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

Executive Summary

This vulnerability allows an unauthenticated attacker on an adjacent private network or through a reverse proxy/load balancer to forge their source IP address and gain administrative session privileges on the Arista Networks CloudVision CUE backend.

Detection Guidance

Detecting this vulnerability requires checking for forged source IP addresses in administrative sessions on Arista CloudVision CUE. Monitor network traffic for unexpected administrative sessions originating from adjacent private networks or through reverse proxies/load balancers. Inspect logs for anomalies in session headers or IP spoofing attempts.

Impact Analysis

An attacker could exploit this to gain full administrative access to the system, potentially leading to unauthorized control, data theft, or disruption of services.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA, potentially resulting in legal penalties and loss of compliance certifications.

Mitigation Strategies

Immediately restrict access to the CV-CUE backend from adjacent private networks or unauthenticated sources. Review and update firewall rules to block unauthorized IP forwarding through reverse proxies or load balancers. Ensure administrative sessions require multi-factor authentication and validate source IP headers strictly.

Hi! I’m here to help you understand CVE-2026-102161. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70