CVE-2026-101156

highPriorität · verfolgen · 0EPSS 0.003 · 21. Perzentil

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.29% (21st) EPSS

CVSS 8.4 · high

Is it mine?

0 products

Prüfe deine Angriffsfläche

Who says so?

— sources

EPSS · bewertet 2026-10-27

A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.4

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–high · 2.2–8.4

v3.18.4highCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:Hsecondary · psirt@arista.comAusnutzbarkeit 1.7 · Auswirkung 6

v4.06.2mediumCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · psirt@arista.com

v4.02.2lowCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)