A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions.
"}]}],"affected":[{"vendor":"Arista Networks","product":"CloudVision Portal","platforms":["CloudVision Portal on-premises, virtual appliance or physical appliance","CV-CUE on-premises"],"defaultStatus":"unaffected","versions":[{"version":"2026.2.0","status":"affected","versionType":"custom"},{"version":"2026.1.0","lessThanOrEqual":"2026.1.2","status":"affected","versionType":"custom"},{"version":"2025.3.0","lessThanOrEqual":"2025.3.3","status":"affected","versionType":"custom"},{"version":"1.0.0","lessThan":"2025.3.0","status":"affected","versionType":"custom"}]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH"}},{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"version":"4.0","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","baseScore":9.3,"baseSeverity":"CRITICAL"}}],"problemTypes":[{"descriptions":[{"type":"CWE","cweId":"CWE-79","lang":"en","description":"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}],"impacts":[{"capecId":"CAPEC-86","descriptions":[{"lang":"en","value":"CAPEC-86 XSS Using HTTP Query Strings"}]}],"configurations":[{"lang":"en","value":"No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.","supportingMedia":[{"type":"text/html","base64":false,"value":"No specific configuration is required to be vulnerable to this issue. This vulnerability is present in the default configuration of affected releases.
"}]}],"workarounds":[{"lang":"en","value":"There is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \"Read and Write\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to Settings → Roles to review role permissions, and Settings → Users to ensure only trusted users are assigned to those roles.","supportingMedia":[{"type":"text/html","base64":false,"value":"There is no mitigation available for this vulnerability. However, operators should ensure that roles with file upload permissions are restricted to trusted users. Review any role that has \"Read and Write\" permission on: Bug Alert Management, File, Packaging, Image Repository. Navigate to Settings → Roles to review role permissions, and Settings → Users to ensure only trusted users are assigned to those roles.
"}]}],"solutions":[{"lang":"en","value":"CVE-2026-101158 has been fixed in the following releases:\n- 2026.2.1 and later releases in the 2026.2.x train\n- 2026.1.3 and later releases in the 2026.1.x train\n- 2025.3.4 and later releases in the 2025.3.x train","supportingMedia":[{"type":"text/html","base64":false,"value":"CVE-2026-101158 has been fixed in the following releases: