Our takeCCCS relays Arista Networks advisory AV26-1015 covering multiple older CloudVision CUE releases. Update to a fixed version now if you run it.Security Resilience desk
What this means for you — Security leader:Review and update CloudVision CUE to a fixed version if you run any release from the 2021.x, 2022.x or 2026.2 branches.
What this means for you — Lean IT orgs:If you use Arista CloudVision CUE, check your version and update to a patched release as soon as possible.
What this means for you — MSP:Audit client environments for Arista CloudVision CUE versions 2026.2.0 and earlier (including the listed 2021/2022 branches) and schedule updates.
What this means for you — Researcher:Arista Networks security advisory AV26-1015 covers vulnerabilities in CloudVision CUE versions 2026.2.0 and prior, plus the listed 2021/2022 branches.