VulnSocial

CVE-2026-17191Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended outbound network connections. This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-07-27); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-07-27: 3Mentions · 2026-07-30: 1Technical Details · 2026-07-27: 307-2707-30
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-07-273
Disclosure3
2026-07-301
General1
Full discourse4 posts
  • NotCVE@notCVE
    General

    🎯 Most likely to be exploited next (EPSS): • CVE-2026-6516 — EPSS 4.7% · CVSS 10 • CVE-2026-47668 — EPSS 4.3% · CVSS 10 • CVE-2026-17191 — EPSS 2.8% · CVSS 9.1 📄 Full weekly tables → https://github.com/notcve/reports/blob/main/weekly/2026-07-30.md

    Post summary

    The post lists three CVEs with EPSS and CVSS scores but offers no technical details, PoC, or exploit information; it is a general alert about likely next exploit targets.

    0000049
    62 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-17191 An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may… https://www.cve.org/CVERecord?id=CVE-2026-17191 ----- Traducción: CVE-2026-17191 Exi… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-17191, highlighting an input validation flaw that lets authenticated users alter backend queries, yet offers no PoC, exploit code, or patch information.

    0000030
    95 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-17191 An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may… https://www.cve.org/CVERecord?id=CVE-2026-17191

    Post summary

    The snippet announces CVE-2026-17191 as an input validation flaw in an orchestrator's API, noting authenticated users can manipulate backend queries. No PoC, exploit code, active exploitation, or patches are referenced.

    00000781
    57.9K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-17191 Input Validation Vulnerability in Orchestrator API Enabling Unauthorized Data Access https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-17191

    Post summary

    The entry reports CVE-2026-17191 as an input validation flaw in the Orchestrator API that permits unauthorized data access.

    00000130
    4.1K followersView on X

Explore more

Back to dashboard