Arista Networks vulnerabilities
180 CVEs and advisories name Arista Networks as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-73468Security Advisory 0175
- CVE-2026-73440Security Advisory 0178
- CVE-2026-73469Security Advisory 0176
- CVE-2026-73453Security Advisory 0174
- CVE-2026-73455Security Advisory 0173
- CVE-2026-73438Security Advisory 0172
- CVE-2026-73436Security Advisory 0171
- CVE-2026-73435Security Advisory 0171
- CVE-2026-19640Security Advisory 0170
- CVE-2026-73463Security Advisory 0169
- CVE-2026-73445Security Advisory 0167
- CVE-2026-2380Security Advisory 0168
- CVE-2026-73464Security Advisory 0166
- CVE-2026-73454Security Advisory 0165
- CVE-2026-73439Security Advisory 0164
- CVE-2026-73461Security Advisory 0163
- CVE-2026-73447Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request
- CVE-2026-86109Security Advisory 0182
- CVE-2026-86108Security Advisory 0181
- CVE-2026-73450Security Advisory 0161
- CVE-2026-73460Security Advisory 0160
- CVE-2026-73459Security Advisory 0160
- CVE-2026-73446Security Advisory 0160
- CVE-2026-73444On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the
- CVE-2026-73437On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper/destinat
- CVE-2026-19655On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent
- CVE-2026-73458On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou
- CVE-2026-73467On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers
- CVE-2026-73466On affected platforms running Arista EOS, under certain circumstances plaintext user passwords
- CVE-2026-73465On affected platforms running Arista EOS, under certain circumstances plaintext private keys