Arista Networks vulnerabilities
180 CVEs and advisories name Arista Networks as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-102163Security Advisory 0195
- CVE-2026-102169Security Advisory 0194
- CVE-2026-102168Security Advisory 0194
- CVE-2026-102162Security Advisory 0193
- CVE-2026-101157Security Advisory 0192
- CVE-2026-101156Security Advisory 0192
- CVE-2026-102156Security Advisory 0191
- CVE-2026-102161Security Advisory 0190
- CVE-2026-102160Security Advisory 0190
- CVE-2026-102159Security Advisory 0190
- CVE-2026-102158Security Advisory 0190
- CVE-2026-102157Security Advisory 0190
- CVE-2026-102155Security Advisory 0190
- CVE-2026-101155Security Advisory 0189
- CVE-2026-101154Security Advisory 0189
- CVE-2026-101153Security Advisory 0188
- CVE-2026-101152Security Advisory 0187
- CVE-2026-101151Security Advisory 0187
- CVE-2026-101150Security Advisory 0186
- CVE-2026-101149Security Advisory 0186
- CVE-2026-101158Security Advisory 0185
- CVE-2026-93952Security Advisory 0183
- CVE-2026-73462On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I
- CVE-2026-73457Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.
- CVE-2026-73456Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.
- CVE-2026-73442On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receiving for
- CVE-2026-73443On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indef
- CVE-2026-86107Security Advisory 0180
- CVE-2026-86106Security Advisory 0179
- CVE-2026-77190Security Advisory 0177