NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-102407 Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrai... 2026-10-06 5.4 NETWORK MEDIUM NVD
CVE-2026-102406 Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to... 2026-10-06 8.8 NETWORK HIGH NVD
CVE-2026-102404 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A low-privileged auth... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-102169 On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can ... 2026-10-06 6.5 ADJACENT_NETWORK MEDIUM NVD
CVE-2026-102168 On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can ... 2026-10-06 6.5 ADJACENT_NETWORK MEDIUM NVD
CVE-2026-102167 On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated ... 2026-10-06 7.5 ADJACENT_NETWORK HIGH NVD
CVE-2026-102165 On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the ... 2026-10-06 7.5 ADJACENT_NETWORK HIGH NVD
CVE-2026-102164 On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless cli... 2026-10-06 3.1 ADJACENT_NETWORK LOW NVD
CVE-2026-102163 On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) prox... 2026-10-06 8.8 ADJACENT_NETWORK HIGH NVD
CVE-2026-102162 On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gate... 2026-10-06 8.8 ADJACENT_NETWORK HIGH NVD
CVE-2026-102161 An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client ... 2026-10-06 8.8 ADJACENT_NETWORK HIGH NVD
CVE-2026-102160 An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafte... 2026-10-06 7.2 NETWORK HIGH NVD
CVE-2026-102159 An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services... 2026-10-06 9.8 NETWORK CRITICAL NVD
CVE-2026-102158 Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to ... 2026-10-06 6.5 NETWORK MEDIUM NVD
CVE-2026-102157 An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under sp... 2026-10-06 5.9 NETWORK MEDIUM NVD