CVE-2026-102159

CVSS 9.8 (critical) · published 2026-10-06

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services.

Weakness: CWE-306

Source: NVD CVE-2026-102159

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24806-security-advisory-0190

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.