Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.7
CVE-2026-102161: Arista CloudVision CUE allows IP spoofing to gain admin session
CVE-2026-102161 · published 29 days ago
Summary
The CloudVision CUE backend can be tricked into thinking a request comes from a trusted source by falsifying the source IP address, even if the attacker is on a neighboring network or uses a reverse proxy. This lets an unauthenticated attacker obtain administrative privileges without a valid login. Apply the vendor's security update, limit access to trusted networks, and enforce strong authentication for all administrative functions.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| arista networks | cloudvision cue | <= 2026.2.0 |
Original advisory text
Security Advisory 0190
An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.7
High
Type
CWE-798Use of Hard-coded Credentials
CWE-290Authentication Bypass by Spoofing
Timeline
Published6 Oct 2026
Updated29 Oct 2026
First seen6 Oct 2026
Track software like this
Free during beta