CVE-2026-102155 in CloudVision CUE

Riassunto

di MITRE • 06/10/2026

An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Arista
• Prenotare: 28/09/2026
• Divulgazione: 06/10/2026
• Moderazione: accettato
• Voce: VDB-414542
• CPE: 20261006
• CWE: CWE-611 (confermato)
• CVSS: 8.5 (CNA)
• EPSS: 0.00000
• KEV: no
• Attività: molto basso
• Settore: Hospital, Education, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-102155
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-102155
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-102155/