Vulnerability Intelligence Report
Security Advisory 0188
CVE-2026-101153
On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.
Path Traversal
No Active Exploit Signals
CVSS Base Score
8.0
HIGH
Exploitability:1.4
Impact Score:6.1
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-22 ↗CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| Arista Networks | CloudVision Portal | 2026.2.0 (affected), 2026.1.0 <= 2026.1.2 (affected), 2025.3.0 <= 2025.3.3 (affected), 2025.2.0 <= 2025.2.3 (affected), 2025.1.0 <= 2025.1.4 (affected), 2024.3.0 <= 2024.3.3 (affected) |
| Arista Networks | CloudVision Sensor | 1.4.0 <= 1.4.2 (affected), 1.3.0 <= 1.3.1 (affected), 1.0.0 < 1.3.0 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
GitHub Advisory
Vulnerability Class
Path Traversal
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Arista Networks, Inc. · Vendor · USA |
| Reserved | 2026-09-28T08:30:31 |
| Published | 2026-10-06T19:38:07 |
| Last Updated | 2026-10-06T19:49:31 |
Community Chatter & Buzz