# Arista Networks EOS.

Every CVE that names Arista Networks EOS among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send mal…](https://agentprime.io/advisories/CVE-2026-73462.md)
  `CVE-2026-73462` · CVE record: Arista Networks EOS · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: Memory corruption
- [Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users.](https://agentprime.io/advisories/CVE-2026-73457.md)
  `CVE-2026-73457` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Information disclosure
- [Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised swi…](https://agentprime.io/advisories/CVE-2026-73456.md)
  `CVE-2026-73456` · CVE record: Arista Networks EOS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Code injection
- [On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privi…](https://agentprime.io/advisories/CVE-2026-73442.md)
  `CVE-2026-73442` · CVE record: Arista Networks EOS · CVSS 2.1 Low · Not analysed yet · Published 16 Sept 2026 · Tags: Information disclosure
- [On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legiti…](https://agentprime.io/advisories/CVE-2026-73443.md)
  `CVE-2026-73443` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Authentication bypass
- [Security Advisory 0177](https://agentprime.io/advisories/CVE-2026-77190.md)
  `CVE-2026-77190` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-20
- [Security Advisory 0175](https://agentprime.io/advisories/CVE-2026-73468.md)
  `CVE-2026-73468` · CVE record: Arista Networks EOS · CVSS 7.1 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-670
- [Security Advisory 0178](https://agentprime.io/advisories/CVE-2026-73440.md)
  `CVE-2026-73440` · CVE record: Arista Networks EOS · CVSS 2.3 Low · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-212
- [Security Advisory 0176](https://agentprime.io/advisories/CVE-2026-73469.md)
  `CVE-2026-73469` · CVE record: Arista Networks EOS · CVSS 6.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control
- [Security Advisory 0174](https://agentprime.io/advisories/CVE-2026-73453.md)
  `CVE-2026-73453` · CVE record: Arista Networks EOS · CVSS 9.5 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Code injection
- [Security Advisory 0173](https://agentprime.io/advisories/CVE-2026-73455.md)
  `CVE-2026-73455` · CVE record: Arista Networks EOS · CVSS 8.9 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-130
- [Security Advisory 0172](https://agentprime.io/advisories/CVE-2026-73438.md)
  `CVE-2026-73438` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service
- [Security Advisory 0171](https://agentprime.io/advisories/CVE-2026-73436.md)
  `CVE-2026-73436` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Memory corruption, CWE-1284
- [Security Advisory 0171](https://agentprime.io/advisories/CVE-2026-73435.md)
  `CVE-2026-73435` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [Security Advisory 0170](https://agentprime.io/advisories/CVE-2026-19640.md)
  `CVE-2026-19640` · CVE record: Arista Networks EOS · CVSS 2.3 Low · Not analysed yet · Published 16 Sept 2026 · Tags: Broken access control
- [Security Advisory 0169](https://agentprime.io/advisories/CVE-2026-73463.md)
  `CVE-2026-73463` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Race condition
- [Security Advisory 0167](https://agentprime.io/advisories/CVE-2026-73445.md)
  `CVE-2026-73445` · CVE record: Arista Networks EOS · CVSS 6.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-20
- [Security Advisory 0168](https://agentprime.io/advisories/CVE-2026-2380.md)
  `CVE-2026-2380` · CVE record: Arista Networks EOS · CVSS 5.1 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-256
- [Security Advisory 0166](https://agentprime.io/advisories/CVE-2026-73464.md)
  `CVE-2026-73464` · CVE record: Arista Networks EOS · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Code injection
- [Security Advisory 0165](https://agentprime.io/advisories/CVE-2026-73454.md)
  `CVE-2026-73454` · CVE record: Arista Networks EOS · CVSS 8.6 High · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Security Advisory 0164](https://agentprime.io/advisories/CVE-2026-73439.md)
  `CVE-2026-73439` · CVE record: Arista Networks EOS · CVSS 7.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-842
- [Security Advisory 0163](https://agentprime.io/advisories/CVE-2026-73461.md)
  `CVE-2026-73461` · CVE record: Arista Networks EOS · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Privilege escalation
- [Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request](https://agentprime.io/advisories/CVE-2026-73447.md)
  `CVE-2026-73447` · CVE record: Arista Networks EOS · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Command injection
- [Security Advisory 0161](https://agentprime.io/advisories/CVE-2026-73450.md)
  `CVE-2026-73450` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 16 Sept 2026 · Tags: CWE-345
- [Security Advisory 0160](https://agentprime.io/advisories/CVE-2026-73460.md)
  `CVE-2026-73460` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: Broken access control
- [Security Advisory 0160](https://agentprime.io/advisories/CVE-2026-73459.md)
  `CVE-2026-73459` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-354
- [Security Advisory 0160](https://agentprime.io/advisories/CVE-2026-73446.md)
  `CVE-2026-73446` · CVE record: Arista Networks EOS · CVSS 7.0 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-696
- [On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP i…](https://agentprime.io/advisories/CVE-2026-73444.md)
  `CVE-2026-73444` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from…](https://agentprime.io/advisories/CVE-2026-73437.md)
  `CVE-2026-73437` · CVE record: Arista Networks EOS · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-345
- [On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with mat…](https://agentprime.io/advisories/CVE-2026-19655.md)
  `CVE-2026-19655` · CVE record: Arista Networks EOS · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-20
- [On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may…](https://agentprime.io/advisories/CVE-2026-73458.md)
  `CVE-2026-73458` · CVE record: Arista Networks EOS · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers](https://agentprime.io/advisories/CVE-2026-73467.md)
  `CVE-2026-73467` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [On affected platforms running Arista EOS, under certain circumstances plaintext user passwords](https://agentprime.io/advisories/CVE-2026-73466.md)
  `CVE-2026-73466` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [On affected platforms running Arista EOS, under certain circumstances plaintext private keys](https://agentprime.io/advisories/CVE-2026-73465.md)
  `CVE-2026-73465` · CVE record: Arista Networks EOS · CVSS 6.0 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Information disclosure
- [On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhau…](https://agentprime.io/advisories/CVE-2026-19641.md)
  `CVE-2026-19641` · CVE record: Arista Networks EOS · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-116
- [On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard f…](https://agentprime.io/advisories/CVE-2026-73451.md)
  `CVE-2026-73451` · CVE record: Arista Networks EOS · CVSS 6.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-1419
- [A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.](https://agentprime.io/advisories/CVE-2026-75945.md)
  `CVE-2026-75945` · CVE record: Arista Networks EOS · CVSS 2.1 Low · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-459
- [A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants…](https://agentprime.io/advisories/CVE-2026-75944.md)
  `CVE-2026-75944` · CVE record: Arista Networks EOS · CVSS 5.6 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-459
- [A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this windo…](https://agentprime.io/advisories/CVE-2026-75943.md)
  `CVE-2026-75943` · CVE record: Arista Networks EOS · CVSS 2.1 Low · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-459
- [All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplic…](https://agentprime.io/advisories/CVE-2026-77191.md)
  `CVE-2026-77191` · CVE record: Arista Networks EOS · CVSS 2.1 Low · Not analysed yet · Published 14 Sept 2026 · Tags: Broken access control
- [On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segm…](https://agentprime.io/advisories/CVE-2026-73449.md)
  `CVE-2026-73449` · CVE record: Arista Networks EOS · CVSS 5.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Authentication bypass
- [Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled](https://agentprime.io/advisories/CVE-2026-2379.md)
  `CVE-2026-2379` · CVE record: Arista Networks EOS · CVSS 8.2 High · Not analysed yet · Published 5 Jun 2026 · Tags: CWE-672
- [Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass](https://agentprime.io/advisories/CVE-2026-7473.md)
  `CVE-2026-7473` · CVE record: Arista Networks EOS · CVSS 6.9 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 5 Jun 2026 · Tags: CWE-1023
- [Arista EOS Dataplane Denial of Service via Malformed IPsec Packet](https://agentprime.io/advisories/CVE-2025-8873.md)
  `CVE-2025-8873` · CVE record: Arista Networks EOS · CVSS 8.7 High · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-1286
- [On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication.](https://agentprime.io/advisories/CVE-2023-5502.md)
  `CVE-2023-5502` · CVE record: Arista Networks EOS · CVSS 8.2 High · Not analysed yet · Published 4 Jun 2026 · Tags: Authentication bypass
- [On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled).](https://agentprime.io/advisories/CVE-2024-27892.md)
  `CVE-2024-27892` · CVE record: Arista Networks EOS · CVSS 7.2 High · Not analysed yet · Published 4 Jun 2026 · Tags: Authentication bypass
- [On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).](https://agentprime.io/advisories/CVE-2024-27890.md)
  `CVE-2024-27890` · CVE record: Arista Networks EOS · CVSS 7.2 High · Not analysed yet · Published 4 Jun 2026 · Tags: Authentication bypass
- [On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports.](https://agentprime.io/advisories/CVE-2024-27891.md)
  `CVE-2024-27891` · CVE record: Arista Networks EOS · CVSS 6.9 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: Broken access control
- [In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN.](https://agentprime.io/advisories/CVE-2024-6858.md)
  `CVE-2024-6858` · CVE record: Arista Networks EOS · CVSS 6.5 Medium · Not analysed yet · Published 4 Jun 2026 · Tags: CWE-1287
- [On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain…](https://agentprime.io/advisories/CVE-2025-7048.md)
  `CVE-2025-7048` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 6 Jan 2026 · Tags: Memory corruption
- [A specially crafted packet can cause the OSFPv3 process to have high CPU utilization which may result in the OSFPv3 process being restarted](https://agentprime.io/advisories/CVE-2025-8872.md)
  `CVE-2025-8872` · CVE record: Arista Networks EOS · CVSS 7.1 High · Not analysed yet · Published 16 Dec 2025 · Tags: Denial of service
- [On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.](https://agentprime.io/advisories/CVE-2025-8870.md)
  `CVE-2025-8870` · CVE record: Arista Networks EOS · CVSS 5.6 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-248
- [On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpect…](https://agentprime.io/advisories/CVE-2025-6188.md)
  `CVE-2025-6188` · CVE record: Arista Networks EOS · CVSS 7.5 High · Not analysed yet · Published 25 Aug 2025 · Tags: Authentication bypass
- [On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and prot…](https://agentprime.io/advisories/CVE-2025-3456.md)
  `CVE-2025-3456` · CVE record: Arista Networks EOS · CVSS 3.8 Low · Not analysed yet · Published 25 Aug 2025 · Tags: Information disclosure
- [n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result…](https://agentprime.io/advisories/CVE-2025-2826.md)
  `CVE-2025-2826` · CVE record: Arista Networks EOS · CVSS 2.6 Low · Not analysed yet · Published 27 May 2025 · Tags: CWE-1284
- [On affected platforms with hardware IPSec support running Arista EOS with IPsec enabled and anti-replay protection configured, EOS may exhibit unexpected behavior in specific cases. Received duplicat…](https://agentprime.io/advisories/CVE-2025-2796.md)
  `CVE-2025-2796` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 27 May 2025
- [On affected platforms running Arista EOS, ingress traffic on Layer 2 ports may, under certain conditions, be improperly forwarded to ports associated with different VLANs, resulting in a breach of VL…](https://agentprime.io/advisories/CVE-2024-11185.md)
  `CVE-2024-11185` · CVE record: Arista Networks EOS · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2025
- [On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the…](https://agentprime.io/advisories/CVE-2024-9448.md)
  `CVE-2024-9448` · CVE record: Arista Networks EOS · CVSS 7.5 High · Not analysed yet · Published 8 May 2025 · Tags: CWE-1284
- [On affected platforms running Arista EOS with a gNMI transport enabled, running the gNOI File TransferToRemote RPC with credentials for a remote server may cause these remote-server credentials to be…](https://agentprime.io/advisories/CVE-2025-0936.md)
  `CVE-2025-0936` · CVE record: Arista Networks EOS · CVSS 6.5 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-256
- [On affected platforms running Arista EOS with 802.1X configured, certain conditions may occur where a dynamic ACL is received from the AAA server resulting in only the first line of the ACL being ins…](https://agentprime.io/advisories/CVE-2024-8000.md)
  `CVE-2024-8000` · CVE record: Arista Networks EOS · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-1284

Older: <https://agentprime.io/advisories/technology/arista-networks-eos.md?cursor=WyIyMDI1LTAzLTA0VDIwOjIwOjUzLjUxNzAwMFoiLCJDVkUtMjAyNC04MDAwIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=arista-networks-eos>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/arista-networks-eos/>. Everything for agents: <https://agentprime.io/llms.txt>.