CVE-2026-102159 in CloudVision CUE

Resumen

por MITRE • 2026-10-06

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsable: Arista
• Reservar: 2026-09-28
• Divulgación: 2026-10-06
• Moderación: aceptado
• Artículo: VDB-414525
• CPE: 20261006
• CWE: CWE-269 (confirmado)
• CVSS: 9.8 (CNA)
• EPSS: 0.00363
• KEV: no
• Actividades: muy bajo
• Sector: Insurance, Telecommunication, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-102159
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-102159
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-102159/