Is CVE-2026-102155 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-102155 being exploited in the wild.

How severe is CVE-2026-102155?

High severity, with a CVSS score of 8.5, published 6 October 2026.

Which products and versions are affected?

Arista Cloudvision Portal 2021.2.0 through 2026.2.0.

Is there a fix for CVE-2026-102155?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-102155 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-102155?

Check whether you run Arista Cloudvision Portal at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-102155: Arista CloudVision CUE XXE injection in Spectralight

CVE-2026-102155 · Severity: high · CVSS 8.5 · Published 2026-10-06

Arista's CloudVision CUE is a Wi-Fi management service that runs on-premises as part of their network management platform. An authenticated user can exploit an XML parsing flaw to read arbitrary files from the server or cause partial service outages, exposing sensitive configuration data and potentially disrupting network operations.

Technologies: Arista Cloudvision Portal. Vendors: Arista.

Quick answers

Is CVE-2026-102155 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-102155 being exploited in the wild.
How severe is CVE-2026-102155?: High severity, with a CVSS score of 8.5, published 6 October 2026.
Which products and versions are affected?: Arista Cloudvision Portal 2021.2.0 through 2026.2.0.
Is there a fix for CVE-2026-102155?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-102155 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-102155?: Check whether you run Arista Cloudvision Portal at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An XML External Entity (XXE) injection vulnerability exists in the WiFi-server Spectralight component, triggered by improper restriction of XML entity references (CWE-611). Any authenticated network user can send malicious XML requests to trigger local file disclosure or denial of service; no user interaction is required. The vulnerability affects CloudVision Portal on-premises versions 2021.2.0 through 2026.2.0.

Affected products

Arista CloudVision Portal 2021.2.0 through 2026.2.0

Timeline

2026-10-06: disclosed

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24806-security-advisory-0190

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.