CVE record · 1 source
CVE-2026-101158
CVSS 8.4A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored…
- Vendor
- Arista Networks
- Product
- EOS / CloudVision
- CVSS
- 8.4
- EPSS
- 0.003 (p21)
- Exposure class
- Edge / VPN / firewall
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored…
A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to…