CVE-2026-101151 MEDIUM

CVE-2026-101151: Security Advisory 0187

Vendor Arista Networks
Product CloudVision Portal
Weakness CWE-601 · Open redirect
Published October 6, 2026
Last update October 6, 2026
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process.

Key dates

02Disclosure timeline

October 6, 2026 CVE published
October 6, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-1277 URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter CVE-2026-55806 Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007 CVE-2025-31821 WordPress Integration of Zoho CRM and Contact Form 7 plugin <= 1.0.6 - Open Redirection Vulnerability CVE-2025-39597 WordPress Fast eBay Listings plugin <= 2.12.15 - Open Redirection Vulnerability CVE-2025-66062 WordPress WP YouTube Lyte plugin <= 1.7.28 - Open Redirection vulnerability