Arista Networks vulnerabilities
180 CVEs and advisories name Arista Networks as an affected vendor, 4 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-19641On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legit
- CVE-2026-73451On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can
- CVE-2026-75945A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.
- CVE-2026-75944A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants, resulting in incorrect access control enforcement. User
- CVE-2026-75943A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcem
- CVE-2026-77191All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplicant policy enforcement. An authenticated supplicant on an
- CVE-2026-73449On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segment who induces a RADIUS packet through a configured RADI
- CVE-2026-17191VeloCloud Orchestrator Flow Metrics API SQL Injection
- CVE-2026-17192VeloCloud Orchestrator Missing Input Validation SSRF
- CVE-2026-16812VeloCloud Orchestrator OS Command Injection
- CVE-2026-25624Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting
- CVE-2026-25623Arista Edge Threat Management NGFW UI Arbitrary Command Execution
- CVE-2026-25622Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection
- CVE-2026-25621Arista Edge Threat Management NGFW Reports Application Insecure Input Validation
- CVE-2026-25620Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection
- CVE-2026-2379Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled
- CVE-2026-7473Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
- CVE-2025-5088Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session
- CVE-2025-5090Arista CloudVision Exchange Cluster Instability via Unexpected Switch Messages
- CVE-2025-5089Arista EOS SysDB Agent Denial of Service via Malformed CVX Client/Server Messages
- CVE-2025-8873Arista EOS Dataplane Denial of Service via Malformed IPsec Packet
- CVE-2023-5502On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.
- CVE-2024-27892On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).
- CVE-2024-27890On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).
- CVE-2024-27891On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.
- CVE-2024-6858In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.
- CVE-2025-7048On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption o
- CVE-2025-8872A specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted
- CVE-2025-8870On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.
- CVE-2025-54549Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO