CVE-2026-102161

Summary

An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE backend.

Affected Software

Weaknesses

• CWE-798: CWE-798 Use of Hard-coded Credentials
• CWE-290: CWE-290 Authentication Bypass by Spoofing

Workarounds

There is no mitigation or workaround available for this issue.

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24806-security-advisory-0190

• ←Previous
• Next→