CVE-2026-75943 A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcem

[
  {
    "vendor": "Arista Networks",
    "product": "EOS",
    "versions": [
      {
        "status": "affected",
        "version": "4.36.0",
        "lessThanOrEqual": "4.36.1F",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.35.0",
        "lessThanOrEqual": "4.35.5M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.34.0",
        "lessThanOrEqual": "4.34.7.1M",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0.0.0",
        "lessThanOrEqual": "4.33.9M",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]