Is CVE-2026-101151 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-101151 being exploited in the wild.

How severe is CVE-2026-101151?

Medium severity, with a CVSS score of 4.3, published 6 October 2026.

Which products and versions are affected?

Arista Cloudvision Portal 2026.2.0, 2026.1.2 and below, 2025.3.3 and below, and all prior releases back to 2020.3.0.

Is there a fix for CVE-2026-101151?

Yes: fixed in 2026.2.1, 2026.1.3, 2025.3.4 and later releases in each respective train. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-101151 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-101151?

Check whether you run Arista Cloudvision Portal at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-101151: Arista CloudVision Portal open redirect in login flow

CVE-2026-101151 · Severity: medium · CVSS 4.3 · Published 2026-10-06

Arista CloudVision Portal is a network management and automation platform used by enterprises to configure and monitor network infrastructure. An unauthenticated attacker can craft a malicious URL that, when clicked by a user, redirects them to an attacker-controlled website after they complete authentication, potentially enabling phishing attacks or credential theft. The vulnerability affects default configurations and does not require special setup to exploit.

Technologies: Arista Cloudvision Portal. Vendors: Arista.

Quick answers

Is CVE-2026-101151 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-101151 being exploited in the wild.
How severe is CVE-2026-101151?: Medium severity, with a CVSS score of 4.3, published 6 October 2026.
Which products and versions are affected?: Arista Cloudvision Portal 2026.2.0, 2026.1.2 and below, 2025.3.3 and below, and all prior releases back to 2020.3.0.
Is there a fix for CVE-2026-101151?: Yes: fixed in 2026.2.1, 2026.1.3, 2025.3.4 and later releases in each respective train. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-101151 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-101151?: Check whether you run Arista Cloudvision Portal at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 2026.2.1, 2026.1.3, 2025.3.4 and later releases in each respective train

Technical details

CVE-2026-101151 is an open redirect (CWE-601) in the login flow caused by insufficient validation of redirect URLs. An unauthenticated remote attacker can craft a URL that causes the user's browser to be redirected to an arbitrary external site upon successful authentication, via a user-initiated click. The vulnerability requires user interaction but no authentication or special configuration; a fix is available in recent patch releases.

Affected products

Arista CloudVision Portal 2026.2.0, 2026.1.2 and below, 2025.3.3 and below, and all prior releases back to 2020.3.0

Timeline

2026-10-06: disclosed

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24803-security-advisory-0187

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.