CVE-2026-19641 On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legit

[
  {
    "vendor": "Arista Networks",
    "product": "EOS",
    "versions": [
      {
        "status": "affected",
        "version": "4.36.0",
        "lessThanOrEqual": "4.36.0F",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.35.0",
        "lessThanOrEqual": "4.35.5M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.34.0",
        "lessThanOrEqual": "4.34.7.1M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0.0.0",
        "lessThanOrEqual": "4.33.8M",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]