CVE-2026-101156: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Arista Networks CloudVision CUE

This vulnerability involves improper neutralization of input during web page generation (CWE-79) in Arista Networks CloudVision CUE. A high-privilege authenticated administrator can store malicious scripts in configuration data. When other authenticated users view or compare these configurations, the malicious scripts execute in their browsers, potentially allowing the attacker to leverage the victim's authenticated session to perform sensitive operations or disrupt services.

Successful exploitation allows an attacker with high-privilege authenticated access to execute arbitrary scripts in the context of other authenticated users. This can lead to compromise of sensitive information, unauthorized configuration changes, and disruption of managed wireless services. The CVSS v3.1 score is 8.4 (High), reflecting network attack vector, low attack complexity, high privileges required, user interaction required, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since this is not a cloud service, remediation depends on vendor patches or workarounds. Until a fix is available, restrict high-privilege administrator access and carefully review configuration changes to detect potential malicious content.