https://vulnogram.org/ Most recent CVEs assigned by Arista Networks, Inc. (arista). https://vulnogram.org/seaview/icons/arista.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-102165 https://vulnogram.org/CVE-2026-102165 On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote code execution. This exploit requires an uncommonly u… High Tue, 06 Oct 2026 19:40:32 GMT https://vulnogram.org/CVE-2026-102167 https://vulnogram.org/CVE-2026-102167 On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation req… Critical Tue, 06 Oct 2026 19:40:32 GMT https://vulnogram.org/CVE-2026-102164 https://vulnogram.org/CVE-2026-102164 On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a crafted packet, causing the access point to reveal m… Low Tue, 06 Oct 2026 19:40:31 GMT https://vulnogram.org/CVE-2026-102163 https://vulnogram.org/CVE-2026-102163 On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) proximity can send a crafted frame to crash the sensor service, disabling WIPS monitoring on the access… High Tue, 06 Oct 2026 19:40:31 GMT https://vulnogram.org/CVE-2026-102169 https://vulnogram.org/CVE-2026-102169 On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service with a crafted HTTP request. The service automatically restarts, but a sust… High Tue, 06 Oct 2026 19:40:30 GMT https://vulnogram.org/CVE-2026-102168 https://vulnogram.org/CVE-2026-102168 On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with a crafted HTTP request. This results in a temporary denial of service… High Tue, 06 Oct 2026 19:40:30 GMT https://vulnogram.org/CVE-2026-102162 https://vulnogram.org/CVE-2026-102162 On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that t… Critical Tue, 06 Oct 2026 19:40:29 GMT https://vulnogram.org/CVE-2026-101157 https://vulnogram.org/CVE-2026-101157 A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the at… Critical Tue, 06 Oct 2026 19:40:29 GMT https://vulnogram.org/CVE-2026-101156 https://vulnogram.org/CVE-2026-101156 A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to store malicious content in a configuration. The content may execute in another authenticated user's browser when that user views or compares… High Tue, 06 Oct 2026 19:40:28 GMT https://vulnogram.org/CVE-2026-102156 https://vulnogram.org/CVE-2026-102156 Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unauthenticated network attacker, under high-complexity conditions, to inject queries against the configured directory service. Medium Tue, 06 Oct 2026 19:40:28 GMT https://vulnogram.org/CVE-2026-102161 https://vulnogram.org/CVE-2026-102161 An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse proxy/load balancer that forwards client headers) can forge their source IP address and gain administrative session privileges on the CV-CUE… High Tue, 06 Oct 2026 19:39:54 GMT https://vulnogram.org/CVE-2026-102160 https://vulnogram.org/CVE-2026-102160 An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service. High Tue, 06 Oct 2026 19:39:54 GMT https://vulnogram.org/CVE-2026-102159 https://vulnogram.org/CVE-2026-102159 An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services. Successful exploitation may expose sensitive location information or disrupt affected services. Critical Tue, 06 Oct 2026 19:39:53 GMT https://vulnogram.org/CVE-2026-102158 https://vulnogram.org/CVE-2026-102158 Improper validation of selected CloudVision CUE application programming interface (API) request parameters may allow an authenticated network user to perform SQL injection against the backend impacting its availability. High Tue, 06 Oct 2026 19:39:53 GMT https://vulnogram.org/CVE-2026-102157 https://vulnogram.org/CVE-2026-102157 An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow an authenticated network user, under specific attack conditions, to access another user's transient data. Medium Tue, 06 Oct 2026 19:39:52 GMT https://vulnogram.org/CVE-2026-102155 https://vulnogram.org/CVE-2026-102155 An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any authenticated user to send malicious requests, leading to arbitrary local file disclosure and partial denial of service. High Tue, 06 Oct 2026 19:39:52 GMT https://vulnogram.org/CVE-2026-101155 https://vulnogram.org/CVE-2026-101155 An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Reposito… Critical Tue, 06 Oct 2026 19:38:23 GMT https://vulnogram.org/CVE-2026-101154 https://vulnogram.org/CVE-2026-101154 An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository. High Tue, 06 Oct 2026 19:38:22 GMT https://vulnogram.org/CVE-2026-101153 https://vulnogram.org/CVE-2026-101153 On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor. High Tue, 06 Oct 2026 19:38:07 GMT https://vulnogram.org/CVE-2026-101152 https://vulnogram.org/CVE-2026-101152 Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider (IdP) to deliver authentication material to an attacker-controlled… High Tue, 06 Oct 2026 19:37:53 GMT https://vulnogram.org/CVE-2026-101151 https://vulnogram.org/CVE-2026-101151 Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, redirects the user's browser to an arbitrary external site upon completion of the authentication process. Medium Tue, 06 Oct 2026 19:37:53 GMT https://vulnogram.org/CVE-2026-101150 https://vulnogram.org/CVE-2026-101150 Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations. Medium Tue, 06 Oct 2026 19:37:25 GMT https://vulnogram.org/CVE-2026-101149 https://vulnogram.org/CVE-2026-101149 Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct requests to arbitrary destinations. Medium Tue, 06 Oct 2026 19:37:25 GMT https://vulnogram.org/CVE-2026-101158 https://vulnogram.org/CVE-2026-101158 A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with file upload privileges to execute stored cross-site scripting (XSS). Successful exploitation could enable the attacker to hijack another Cloud… Critical Tue, 06 Oct 2026 19:36:51 GMT https://vulnogram.org/CVE-2026-93952 https://vulnogram.org/CVE-2026-93952 VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and ava… Critical Known Exploited Tue, 22 Sep 2026 07:37:24 GMT https://vulnogram.org/CVE-2026-73462 https://vulnogram.org/CVE-2026-73462 On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause… High Wed, 16 Sep 2026 19:01:21 GMT https://vulnogram.org/CVE-2026-73457 https://vulnogram.org/CVE-2026-73457 Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users. Medium Wed, 16 Sep 2026 18:57:50 GMT https://vulnogram.org/CVE-2026-73456 https://vulnogram.org/CVE-2026-73456 Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker fu… Critical Network Exploitable Wed, 16 Sep 2026 18:54:59 GMT https://vulnogram.org/CVE-2026-73442 https://vulnogram.org/CVE-2026-73442 On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receivi… Low Wed, 16 Sep 2026 18:50:06 GMT https://vulnogram.org/CVE-2026-73443 https://vulnogram.org/CVE-2026-73443 On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it… Medium Wed, 16 Sep 2026 18:47:30 GMT https://vulnogram.org/CVE-2026-86107 https://vulnogram.org/CVE-2026-86107 The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated overlay neighbors. This vulnerability impacts the VeloCloud VCMP tunnel protocol only. A successful exploit can ca… High Wed, 16 Sep 2026 10:49:31 GMT https://vulnogram.org/CVE-2026-86106 https://vulnogram.org/CVE-2026-86106 An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled. Critical Wed, 16 Sep 2026 10:12:55 GMT https://vulnogram.org/CVE-2026-77190 https://vulnogram.org/CVE-2026-77190 On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate… Medium Wed, 16 Sep 2026 10:08:55 GMT https://vulnogram.org/CVE-2026-73468 https://vulnogram.org/CVE-2026-73468 A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period. High Wed, 16 Sep 2026 09:55:17 GMT https://vulnogram.org/CVE-2026-73440 https://vulnogram.org/CVE-2026-73440 On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configuratio… Medium Wed, 16 Sep 2026 09:55:14 GMT https://vulnogram.org/CVE-2026-73469 https://vulnogram.org/CVE-2026-73469 When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration, certain traffic may not be subjected to the intended verification drop. Consequently, traffic that should be dropped based on these routes… Medium Wed, 16 Sep 2026 09:55:14 GMT https://vulnogram.org/CVE-2026-73453 https://vulnogram.org/CVE-2026-73453 An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with P4Runtime. P4Runtime is disabled b… Critical Wed, 16 Sep 2026 09:46:33 GMT https://vulnogram.org/CVE-2026-73455 https://vulnogram.org/CVE-2026-73455 On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly. High Wed, 16 Sep 2026 09:46:15 GMT https://vulnogram.org/CVE-2026-73438 https://vulnogram.org/CVE-2026-73438 On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, an unauthenticated attacker on the same OSPFv3 broadcast domain can send a specially crafted set of packets that can cause the Ospf3 agent to restar… High Wed, 16 Sep 2026 09:38:57 GMT https://vulnogram.org/CVE-2026-73436 https://vulnogram.org/CVE-2026-73436 On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet from an adjacent OSPF neighbor may cause OSPF to restart unexpectedly. Medium Wed, 16 Sep 2026 09:19:47 GMT https://vulnogram.org/CVE-2026-73435 https://vulnogram.org/CVE-2026-73435 On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on the same broadcast segment, with OSPFv2 authentication configured can cause ad… High Wed, 16 Sep 2026 09:19:47 GMT https://vulnogram.org/CVE-2026-19640 https://vulnogram.org/CVE-2026-19640 On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive incorrect authorization results, potentially allowing access beyond their currently assigned permissions. This iss… Medium Wed, 16 Sep 2026 09:11:32 GMT https://vulnogram.org/CVE-2026-73463 https://vulnogram.org/CVE-2026-73463 On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured, a race condition in the gNSI Authz service may cause a policy rotation to fail silently. An authenticated user whose access was… Medium Wed, 16 Sep 2026 09:02:19 GMT https://vulnogram.org/CVE-2026-73445 https://vulnogram.org/CVE-2026-73445 On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may cause an incorrect Authz policy which was uploaded in the ongoing RPC stream to become active. This does not affect Bootz. This is… Medium Wed, 16 Sep 2026 08:58:51 GMT https://vulnogram.org/CVE-2026-2380 https://vulnogram.org/CVE-2026-2380 On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote acco… High Wed, 16 Sep 2026 08:48:53 GMT https://vulnogram.org/CVE-2026-73464 https://vulnogram.org/CVE-2026-73464 On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management Interface (gNMI) access to execute arbitrary code wi… High Wed, 16 Sep 2026 08:32:54 GMT https://vulnogram.org/CVE-2026-73454 https://vulnogram.org/CVE-2026-73454 On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a specially crafted request can cause unintended modifications to the target account's properties. This may result in the account being assig… High Wed, 16 Sep 2026 08:14:40 GMT https://vulnogram.org/CVE-2026-73439 https://vulnogram.org/CVE-2026-73439 On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on the system, then gNMI may fail to correctly enforce the rules in this… High Wed, 16 Sep 2026 08:09:11 GMT https://vulnogram.org/CVE-2026-73461 https://vulnogram.org/CVE-2026-73461 On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not i… Critical Wed, 16 Sep 2026 08:01:20 GMT https://vulnogram.org/CVE-2026-73447 https://vulnogram.org/CVE-2026-73447 A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface (gNSI) Certz service on Arista EOS-based prod… Critical Wed, 16 Sep 2026 06:04:25 GMT