{"id":"CVE-2026-101158","published":"2026-10-06T20:17:10.127","lastModified":"2026-10-07T13:38:48.657","description":"A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another CloudVision user's web session, potentially granting full access to their account and administrative permissions.","cvssScore":8.4,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24801-security-advisory-0185","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A stored XSS vulnerability in the Fileserver upload API allows authenticated attackers with file upload privileges to inject malicious scripts that execute in other users' browsers. This could lead to session hijacking and full account compromise.","exploitability":"Exploitation requires an authenticated user with file upload permissions, making it moderately difficult but achievable through social engineering or compromised credentials.","blast_radius":"The vulnerability could impact multiple CloudVision users whose sessions are hijacked, potentially allowing attackers to gain administrative access to the entire system.","remediation":"Disable the Fileserver upload API endpoint until a patch is available, or restrict access to it via network segmentation.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["xss","web","session-hijacking","file-upload"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:54:40.222Z"}}