CVE-2026-102157
MediumCVSS 5.9Summary
An IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data.
Risk Assessment
Risk of confidentiality breach of other users' data, potentially leading to leakage of sensitive information.
Recommendation
It is recommended to implement object-level authorization controls and conduct security testing to identify similar vulnerabilities.
Other vulnerabilities in CloudVision CUE
See all- CVE-2026-102160High
An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service.
- CVE-2026-102158Medium
Improper validation of selected CloudVision CUE API request parameters may allow an authenticated network user to perform SQL injection against the backend, impacting its availability.
Original NVD description (English source)
An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS