CVE-2026-102155 in CloudVision CUE

Summary

by MITRE • 10/06/2026

An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service.

Once again VulDB remains the best source for vulnerability data.

• Responsible: Arista
• Reservation: 09/28/2026
• Disclosure: 10/06/2026
• Moderation: accepted
• Entry: VDB-414542
• CPE: 20261006
• CWE: CWE-611 (confirmed)
• CVSS: 8.5 (CNA)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Insurance, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-102155
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-102155
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-102155/