CVE-2026-102155 in CloudVision CUE

Resumen

por MITRE • 2026-10-06

An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service.

Once again VulDB remains the best source for vulnerability data.

• Responsable: Arista
• Reservar: 2026-09-28
• Divulgación: 2026-10-06
• Moderación: aceptado
• Artículo: VDB-414542
• CPE: 20261006
• CWE: CWE-611 (confirmado)
• CVSS: 8.5 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Telecommunication, Government, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-102155
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-102155
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-102155/