CVE-2026-105244 is a medium severity vulnerability in Apache log4net's RemoteSyslogAppender where improper encoding or escaping of output causes non-ASCII and control characters to be removed rather than escaped. This can cause distinct input values to appear identical in logs, potentially misleading log analysis. The issue affects versions from 1.2.12 up to but not including 3.5.0. Upgrading to version 3.5.0 resolves the vulnerability.
The npm package css-jptvix-polyfill version 1.0.0 contains malicious code that mimics internal Wix thunderbolt modules to trigger its payload when imported. Upon loading, it executes system commands to gather environment details and sends this sensitive information to a hardcoded external server. It also downloads and executes attacker-controlled JavaScript, potentially establishing a reverse shell on the victim's machine. This behavior indicates a dependency confusion attack targeting Wix thunderbolt builds.
CVE-2026-105242 is a medium severity vulnerability in Apache log4net affecting versions from 1.2.11 up to but not including 3.5.0. It involves improper handling of exceptional conditions in the aspnet-request pattern converter. When request parameters trigger ASP.NET request validation and contain markup, the layout throws an exception causing the appender to discard the entire log event. This allows a sender to suppress logging of their own request. The issue only affects applications running on ASP.NET for .NET Framework that use the %aspnet-request layout pattern. Upgrading to version 3.5.0 resolves the vulnerability.
CVE-2026-105241 is a medium severity vulnerability in Apache log4net affecting versions from 1.2.9 up to but not including 3.5.0. It involves improper handling of Unicode encoding in the SmtpPickupDirAppender component. Specifically, when the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate, it throws an error causing all buffered events in the batch to be discarded and potentially leaving a truncated mail file in the pickup directory. This can allow an attacker who controls log message content to suppress logging of other events. The issue is fixed in version 3.5.0.
CVE-2026-105240 is a medium severity vulnerability in Apache log4net affecting versions from 1.2.9 up to but not including 3.5.0. It involves improper neutralization of null byte characters in the OutputDebugStringAppender on Windows platforms. When a null byte appears in logged content, it prematurely terminates the debug output record, causing loss of subsequent log data including exception details. This allows an attacker who can influence log messages to hide parts of the log record. The issue is fixed in version 3.5.0.
CVE-2026-105239 is a medium severity vulnerability in Apache log4net affecting versions from 1.2.9 up to but not including 3.5.0. It involves improper neutralization of null byte characters in the EventLogAppender on Windows. A null byte in logged content prematurely ends the Windows Event Log record, causing subsequent data such as exception text and trailing fields to be omitted silently. This allows data that reaches the log message to hide the rest of that log record. The issue is fixed in version 3.5.0.
CVE-2026-106446 is a critical code injection vulnerability in handlebars.js versions 4.0.0 up to but not including 4.7.10. The vulnerability arises because Handlebars.compile() and Handlebars.precompile() accept pre-parsed AST objects without fully validating all node values, allowing untrusted input objects to inject arbitrary JavaScript code. This can lead to remote code execution on the server or malicious code execution in client environments where precompiled templates are used. Applications passing untrusted objects instead of strings to these functions are affected. The vulnerability has a CVSS score of 9.8, indicating critical severity.
CVE-2026-102165 is a stack-based buffer overflow vulnerability in Arista Networks Wi-Fi Access Points. An unauthenticated attacker with network access to the capture service can send a specially crafted packet to cause the service to crash or potentially execute remote code. Exploitation requires use of a non-default streaming mode that is uncommonly enabled. The vulnerability affects multiple versions of the product up to 22.0.1F-32. The CVSS score is 7.5, indicating high severity.
CVE-2026-102167 is a stack-based buffer overflow vulnerability in Arista Networks Wi-Fi Access Points affecting certain firmware versions. It allows an unauthenticated attacker on the same network segment as the wired uplink to cause memory corruption that can crash the sensor service or potentially enable remote code execution. The vulnerability has a high severity with a CVSS score of 7.5. No explicit patch or remediation details are provided in the available data.
CVE-2026-102164 is an out-of-bounds read vulnerability (CWE-125) affecting Arista Networks Wi-Fi Access Points when configured with VXLAN tunnelling and L2-proxy in the VESPA use-case. A wireless client connected to the tunnelled SSID can send a crafted packet that causes the access point to leak memory contents in network traffic. This vulnerability does not allow write access or remote code execution. The CVSS score is 3.1, indicating low severity.
CVE-2026-102163 is a high-severity out-of-bounds write vulnerability (CWE-787) affecting Arista Networks Wi-Fi Access Points with Wireless Intrusion Prevention System (WIPS) enabled. An unauthenticated attacker within radio frequency proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring or potentially achieving remote code execution. No wireless association or authentication is required to exploit this vulnerability.
CVE-2026-102169 is a medium severity vulnerability affecting Arista Networks Wi-Fi Access Points with Captive Portal enabled. An unauthenticated wireless client connected to a captive-portal-enabled SSID can send a crafted HTTP request that causes a NULL pointer dereference, crashing the portal service. Although the service restarts automatically, a sustained low-rate attack can cause a persistent denial of service of the captive portal. Remote code execution is not possible.
CVE-2026-102168 is an integer underflow vulnerability affecting Arista Networks Wi-Fi Access Points with Captive Portal enabled. An unauthenticated wireless client connected to such an SSID can send a crafted HTTP request that crashes the portal service, causing a temporary denial of service until the service restarts automatically. Remote code execution is not possible. The vulnerability affects multiple versions of the product as specified. The CVSS score is 6.5, indicating a medium severity impact focused on availability.
A stack-based buffer overflow vulnerability exists in Arista Networks Wi-Fi Access Points when captive portal or application firewall is enabled on at least one SSID. An unauthenticated network-adjacent attacker can send a crafted packet to the wireless gateway service, triggering a stack overflow that may cause denial-of-service or arbitrary code execution. The wireless gateway service restarts automatically after a crash, enabling repeated exploitation attempts.
CVE-2026-101157 is a stored cross-site scripting (XSS) vulnerability in Arista Networks CloudVision CUE. It allows an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views the affected content. Exploitation can compromise the victim's authenticated browser session, access sensitive data, modify system state, or disrupt services. The vulnerability affects versions from 2021.2.0 through 2026.2.0. It has a high severity with a CVSS score of 8.7.
CVE-2026-101156 is a stored cross-site scripting (XSS) vulnerability in Arista Networks CloudVision CUE that affects versions from 2025.2.0 through 2026.2.0. An authenticated high-privilege administrator can store malicious content in configurations, which may execute in the browsers of other authenticated users viewing or comparing those configurations. Exploitation could allow attackers to leverage the victim's browser session to access sensitive data, modify configurations, or disrupt wireless services.
CVE-2026-102156 is a vulnerability in Arista Networks CloudVision CUE involving improper neutralization of LDAP authentication input. This flaw could allow an unauthenticated network attacker to inject LDAP queries under complex conditions. The vulnerability affects versions from 2021.2.0 through 2026.2.0. It has a CVSS v3.1 score of 6.8, indicating medium severity. No known exploits are reported in the wild, and no patch information is currently provided.
CVE-2026-102161 is a high-severity vulnerability in Arista Networks CloudVision CUE that involves the use of hard-coded credentials. An unauthenticated attacker on an adjacent private network or routed through a reverse proxy can forge their source IP address to gain administrative session privileges on the CV-CUE backend. This vulnerability affects versions from 2021.2.0 through 2026.2.0 inclusive. The vulnerability has a CVSS score of 8.8, indicating a high impact on confidentiality, integrity, and availability.
CVE-2026-102160 is an OS command injection vulnerability in Arista Networks CloudVision CUE backup management. It allows an authenticated Super User to submit a crafted backup request that could execute arbitrary OS commands with the privileges of the affected service. The vulnerability affects versions from 2021.2.0 through 2026.2.0 inclusive. The CVSS 3.1 base score is 7.2, indicating a high severity level. No public exploits are known, and no vendor patch information is provided in the input data.
CVE-2026-102159 is a critical access-control vulnerability in Arista Networks CloudVision CUE. It involves missing authentication for a critical backend function, allowing unauthenticated network attackers to access internal service functionality. Exploitation can lead to exposure of sensitive location information and disruption of affected services. The vulnerability affects versions from 2022.3.0 through 2026.2.0 inclusive. The CVSS score is 9.8, indicating a critical severity level.