@stackflag.bsky.socialCVE-2026-102167 - wi-fi access points
Arista Wi‑Fi access points have a flaw in their wired network connection that lets anyone on the same local network cause the device to stop working or potentially run…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102162 - wi-fi access points
Arista Wi‑Fi access points that use a captive portal or have an application firewall on any Wi‑Fi network can be sent a specially crafted packet that makes the device stop…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-102159 - cloudvision cue
The backend component of Arista CloudVision CUE can be reached over the network without any login, allowing outsiders to use features meant only for internal…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101158 - cloudvision portal
The file‑upload feature in Arista’s CloudVision portal does not properly check the content that users can upload. An attacker who already has permission…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-101157 - cloudvision cue
Arista CloudVision can be tricked into storing malicious code that runs when a logged‑in user views certain pages. An attacker on the same network could use…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-93952 - velocloud orchestrator (vco) on-prem
The on‑premises VeloCloud Orchestrator may let an attacker from outside reach privileged functions inside the system. This could let them view, change, or…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-73456 - eos
Switches running Arista EOS with the gNPSI feature turned on can be accessed by anyone on the network. An attacker could send a specially crafted message that runs code on the switch…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-86106 - velocloud edge
Anyone on the same network as the private HA link between Edge devices can trigger privileged actions without proving their identity. This can give them the…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-73453 - eos
If the P4Runtime feature is turned on in Arista EOS, an attacker who can send a specially crafted packet can gain full administrative control of the switch. The attack does not…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-73461 - eos
Arista EOS switches that have AAA‑based gRPC authentication turned on for OpenConfig can give an authenticated user the incorrect level of access when they use gRPC. This means a user…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-73458 - eos
Arista EOS devices that use authenticated Bidirectional Forwarding Detection (BFD) can have those sessions dropped when they receive a specially crafted network packet. When BFD…
Too many irrelevant or confusing CVEs? Use stackflag.com