CloudVision CUE CVE-2026-102160

Exploitation requires an authenticated CloudVision CUE Super User account and the ability to reach and submit a backup request to the backup management feature; the malicious payload is delivered through crafted input in that backup request. The primary limiting factor is the PR:H requirement - only an existing Super User (the highest application privilege level) can trigger this, so it cannot be exploited by anonymous or low-privileged remote users and functions as an application-admin-to-OS escalation. No user interaction by a second party is needed (UI:N). The flaw is in the backup management command handling specifically, so environments that restrict or do not expose Super User access to untrusted parties face substantially reduced exposure.

This is a genuine but access-gated vulnerability rather than a mass-exploitation threat. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:H/UI:N) and the 8.6 score are driven almost entirely by the high vulnerable-system impact (VC:H/VI:H/VA:H) combined with network reachability and low attack complexity - but the decisive limiting signal is PR:H: the attacker must already hold Super User credentials on CloudVision. That single prerequisite sharply reduces real-world risk, because an attacker with Super User rights already controls the management plane; the vulnerability primarily enables a privilege-boundary escape from application-level admin to OS-level command execution as the backup service account. No EPSS score, no CISA KEV listing, and no public exploit code were provided in the input, so there is no public exploit identified at time of analysis and no evidence of active exploitation. SSVC-style reading: exploitation=none observed, technical impact=total (OS command execution), automatable=no (requires authenticated privileged session, not a spray-able unauthenticated flaw). Net: a legitimately high-severity post-authentication issue worth patching on normal priority, but not an emergency drop-everything item absent exploitation evidence. Note one modeling tension - the raw score reads 'critical-adjacent,' yet the PR:H gate means practical risk is far lower than the number alone implies.

An attacker who has already obtained (or abused) a CloudVision CUE Super User account submits a backup request containing crafted input that is passed unsafely to an OS command, causing arbitrary commands to run with the privileges of the backup service. No public proof-of-concept was provided, and the network vector with low complexity means the crafted request can be sent remotely once the privileged session exists.