CVE Vulnerability Database
Search and browse 425,022 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-102409 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an El... |
| CVE-2026-102408 | MEDIUM | 4.3 | 0.3% | Oct 6, 2026 | Inefficient Regular Expression Complexity (CWE-1333) in Elasticsearch can lead to denial of service via Regular Expressi... |
| CVE-2026-102407 | MEDIUM | 5.4 | 0.2% | Oct 6, 2026 | Incorrect Authorization (CWE-863) in Elasticsearch can lead to unauthorized data stream modification via Accessing Funct... |
| CVE-2026-102406 | HIGH | 8.8 | 0.4% | Oct 6, 2026 | Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana could lead to cross-tenant data interception. In th... |
| CVE-2026-102404 | MEDIUM | 6.5 | 0.3% | Oct 6, 2026 | Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAP... |
| CVE-2026-102169 | MEDIUM | 6.5 | — | Oct 6, 2026 | On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a ca... |
| CVE-2026-102168 | MEDIUM | 6.5 | — | Oct 6, 2026 | On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Ca... |
| CVE-2026-102167 | HIGH | 7.5 | — | Oct 6, 2026 | On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network ... |
| CVE-2026-102165 | HIGH | 7.5 | — | Oct 6, 2026 | On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send ... |
| CVE-2026-102164 | LOW | 3.1 | — | Oct 6, 2026 | On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the V... |
| CVE-2026-102163 | HIGH | 8.8 | — | Oct 6, 2026 | On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker wi... |
| CVE-2026-102162 | HIGH | 8.8 | — | Oct 6, 2026 | On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vuln... |
| CVE-2026-102161 | HIGH | 8.8 | — | Oct 6, 2026 | An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load ... |
| CVE-2026-102160 | HIGH | 7.2 | — | Oct 6, 2026 | An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated... |
| CVE-2026-102159 | CRITICAL | 9.8 | — | Oct 6, 2026 | An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality inten... |
| CVE-2026-102158 | MEDIUM | 6.5 | — | Oct 6, 2026 | Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an ... |
| CVE-2026-102157 | MEDIUM | 5.9 | — | Oct 6, 2026 | An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authen... |
| CVE-2026-102156 | MEDIUM | 6.8 | — | Oct 6, 2026 | Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticate... |
| CVE-2026-102155 | HIGH | 8.5 | — | Oct 6, 2026 | An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticate... |
| CVE-2026-101158 | HIGH | 8.4 | — | Oct 6, 2026 | A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload ... |
| CVE-2026-101157 | HIGH | 8.7 | — | Oct 6, 2026 | A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to ... |
| CVE-2026-101156 | HIGH | 8.4 | — | Oct 6, 2026 | A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store mali... |
| CVE-2026-101155 | CRITICAL | 9.1 | — | Oct 6, 2026 | An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the... |
| CVE-2026-101154 | HIGH | 7.2 | 0.6% | Oct 6, 2026 | An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the... |
| CVE-2026-101153 | HIGH | 8 | — | Oct 6, 2026 | On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. A... |