CVE-2026-102158
MediumCVSS 6.5Summary
Improper validation of selected CloudVision CUE API request parameters may allow an authenticated network user to perform SQL injection against the backend, impacting its availability.
Risk Assessment
The risk involves potential availability disruption of the CloudVision CUE backend via SQL injection, which could lead to outages in network management services.
Recommendation
Upgrade CloudVision CUE to a patched version and implement server-side validation of API parameters to prevent SQL injection attacks.
Other vulnerabilities in CloudVision CUE
See all- CVE-2026-102160High
An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service.
- CVE-2026-102157Medium
An IDOR vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data.
Original NVD description (English source)
Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS