Skip to contentArista Networks vulnerabilities
Newest
- arista networks cloudvision portalSecurity Advisory 0185CVE-2026-1011589.3 Critical
- arista velocloud orchestrator, arista networks velocloud orchestrator (vco) on-prem +1 moreSecurity Advisory 0183CVE-2026-93952In KEV9.5 Critical
- arista networks eosOn affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malf…CVE-2026-734627.1 High
- arista networks eosUnder certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.CVE-2026-734576.0 Medium
- arista networks eosUnder certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised swit…CVE-2026-734569.2 Critical
- arista networks eosOn affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privil…CVE-2026-734422.1 Low
- arista networks eosOn affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitim…CVE-2026-734435.3 Medium
- arista networks velocloud, velocloud gateway +1 moreSecurity Advisory 0180CVE-2026-861078.2 High
- arista networks velocloud edgeSecurity Advisory 0179CVE-2026-861068.7 High
- arista networks eosSecurity Advisory 0177CVE-2026-771906.0 Medium
- arista networks eosSecurity Advisory 0175CVE-2026-734687.1 High
- arista networks eosSecurity Advisory 0176CVE-2026-734696.9 Medium
- arista networks eosSecurity Advisory 0178CVE-2026-734402.3 Low
- arista networks eosSecurity Advisory 0174CVE-2026-734539.5 Critical
- arista networks eosSecurity Advisory 0173CVE-2026-734558.9 High
- arista networks eosSecurity Advisory 0172CVE-2026-734387.0 High
- arista networks eosSecurity Advisory 0171CVE-2026-734366.0 Medium
- arista networks eosSecurity Advisory 0171CVE-2026-734357.0 High
- arista networks eosSecurity Advisory 0170CVE-2026-196402.3 Low
- arista networks eosSecurity Advisory 0169CVE-2026-734636.0 Medium
- arista networks eosSecurity Advisory 0167CVE-2026-734456.9 Medium
- arista networks eosSecurity Advisory 0168CVE-2026-23805.1 Medium
- arista networks eosSecurity Advisory 0166CVE-2026-734648.7 High
- arista networks eosSecurity Advisory 0165CVE-2026-734548.6 High
- arista networks eosSecurity Advisory 0164CVE-2026-734397.7 High
- arista networks eosSecurity Advisory 0163CVE-2026-734619.4 Critical
- arista networks eosSecurity Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate RequestCVE-2026-734479.4 Critical
- arista networks velocloud edgeSecurity Advisory 0182CVE-2026-861097.5 High
- arista networks velocloud edgeSecurity Advisory 0181CVE-2026-861087.5 High
- arista networks eosSecurity Advisory 0161CVE-2026-734507.0 High
- arista networks eosSecurity Advisory 0160CVE-2026-734607.0 High
- arista networks eosSecurity Advisory 0160CVE-2026-734597.0 High
- arista networks eosSecurity Advisory 0160CVE-2026-734467.0 High
- arista networks eosOn affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is…CVE-2026-734445.3 Medium
- arista networks eosOn affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from a…CVE-2026-734376.5 Medium
- arista networks eosOn affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with matc…CVE-2026-196557.1 High
- arista networks eosOn affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may r…CVE-2026-734589.2 Critical
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) serversCVE-2026-734676.0 Medium
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext user passwordsCVE-2026-734666.0 Medium
- arista networks eosOn affected platforms running Arista EOS, under certain circumstances plaintext private keysCVE-2026-734656.0 Medium
- arista networks eosOn affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaus…CVE-2026-196416.9 Medium
- arista networks eosOn affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard fo…CVE-2026-734516.3 Medium
- arista networks eosA race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.CVE-2026-759452.1 Low
- arista networks eosA race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants,…CVE-2026-759445.6 Medium
- arista networks eosA brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window…CVE-2026-759432.1 Low
- arista networks eosAll of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplica…CVE-2026-771912.1 Low
- arista networks eosOn affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segme…CVE-2026-734495.9 Medium
- arista networks velocloud orchestrator on-premVeloCloud Orchestrator Flow Metrics API SQL InjectionCVE-2026-171918.5 High
- arista networks velocloud orchestrator on-premVeloCloud Orchestrator Missing Input Validation SSRFCVE-2026-171926.3 Medium
- arista velocloud orchestrator, arista networks velocloud orchestrator on-prem +1 moreVeloCloud Orchestrator OS Command InjectionCVE-2026-16812In KEV10.0 Critical
- Show moreLoading…