{"id":"CVE-2026-101156","published":"2026-10-06T20:17:09.837","lastModified":"2026-10-07T13:38:48.657","description":"A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares the affected configuration. Successful exploitation may allow the attacker to act through the victim's authenticated browser session to access sensitive data, modify configurations, or disrupt managed wireless services.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stored XSS vulnerability allows authenticated administrators with high privileges to inject malicious scripts into configuration settings that execute in other users' browsers when they view or compare those configurations. This enables attackers to hijack user sessions and access sensitive data.","exploitability":"Exploitation requires an authenticated administrator with high privileges to store malicious content, making it moderately difficult but not highly complex to achieve.","blast_radius":"If exploited, this vulnerability could allow attackers to impersonate administrators, access confidential network configurations, and potentially disrupt wireless services across the affected system.","remediation":"No fixed version is published. Disable the affected configuration management feature or restrict access to the named endpoint until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["xss","web","configuration","privilege-escalation"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:54:47.225Z"}}