← Back to search

CVE-2026-101153

8 HIGH

Published 2026-10-06 · Updated 2026-10-07

AI risk analysis

Summary
A path traversal vulnerability in CloudVision Portal/Sensor allows authenticated users with high privileges to access unintended files and data on the sensor system. This represents a significant data exposure risk as attackers can extract sensitive information from the affected systems.
Exploitability
Exploitation requires an authenticated user with sufficient privileges, but is moderately difficult due to the need for specific path traversal payloads and the requirement for high-privilege accounts.
Blast radius
The vulnerability could lead to widespread data extraction across multiple sensor systems, potentially exposing sensitive operational data, configuration files, and system information that could aid further attacks.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to CloudVision Portal 2.590 or later to address this path traversal vulnerability.
path-traversaldata-exfiltrationsensorprivilege-escalation

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-22

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.