Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-101153

Security Advisory 0188

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks CloudVision Portal

Default version status: unaffected

  • 2026.2.0affected
  • 2026.1.0 to ≤ 2026.1.2affected
  • 2025.3.0 to ≤ 2025.3.3affected
  • 2025.2.0 to ≤ 2025.2.3affected
  • 2025.1.0 to ≤ 2025.1.4affected
  • 2024.3.0 to ≤ 2024.3.3affected

Arista Networks CloudVision Sensor

Default version status: unaffected

  • 1.4.0 to ≤ 1.4.2affected
  • 1.3.0 to ≤ 1.3.1affected
  • 1.0.0 to < 1.3.0affected

References