CVE record · 1 source
CVE-2026-101152
CVSS 8.0Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a…
- Vendor
- Arista Networks
- Product
- EOS / CloudVision
- CVSS
- 8.0
- EPSS
- 0.004 (p32)
- Exposure class
- Edge / VPN / firewall
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a…
Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider (IdP) to deliver authentication material to…