Arista CloudVision CUE CVE-2026-102158

Requires a valid authenticated account on the Arista CloudVision CUE platform (PR:L) with network reachability to its API; exploitation is performed by supplying malicious values in specific CloudVision CUE API request parameters that undergo improper validation, triggering SQL injection against the backend database. Impact is limited to availability of that backend - no confidentiality or integrity impact per the vendor vector. The primary limiting factor is the authentication prerequisite; no user interaction is needed and attack complexity is low once credentials are held. Specific affected API endpoints and versions are defined in the Arista advisory and are not enumerated in the provided data.

Arista's CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) scores 7.1 (High), driven ENTIRELY by availability impact (VA:H) with explicitly zero confidentiality and integrity impact (VC:N/VI:N) - unusual for SQL injection, which typically yields data disclosure or tampering. This narrows the real-world consequence to a denial-of-service against the CloudVision CUE backend database rather than data theft. No EPSS score, CISA KEV listing, or POC availability was provided in the input, so there is no signal of active or probable exploitation; per the data, no public exploit is identified at time of analysis. The authentication requirement (PR:L) is a meaningful limiting factor - an attacker must first hold valid low-privilege credentials, making this more plausible for insider/post-compromise abuse than mass opportunistic attacks. Net assessment: a genuine but moderate priority - network-reachable and low-complexity, yet gated by authentication and capped at availability loss, so it is a High-CVSS DoS issue rather than a critical breach vector. Note: impact metrics are vendor-asserted and not independently verified; SQLi affecting only availability should be confirmed against the Arista advisory, as injection flaws can sometimes be leveraged beyond the stated impact.

An attacker holding valid low-privilege CloudVision CUE credentials submits crafted API requests containing malicious values in improperly validated parameters, injecting SQL that the backend executes. The injected statements disrupt or exhaust the backend database, degrading or denying availability of CloudVision services. No public exploit code was identified in the provided data; exploitation is network-based and low-complexity but requires prior authentication.