PT-2026-93426

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description When specific platforms use a loose Unicast Reverse Path Forwarding uRPF configuration, certain traffic may bypass the intended verification drop. This allows traffic that should be...

PT-2026-93405

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description An authenticated user with access to the gNMI gRPC Network Management Interface may receive incorrect authorization results. This could potentially allow the user to gain access beyond the...

PT-2026-93400

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description A race condition in the gNSI Authz service occurs on platforms running Arista EOS when multiple gRPC Network Security Interface gNSI transports are configured. This condition may cause a...

PT-2026-93409

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description On platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet sent from an adjacent OSPF neighbor can cause the OSPF process to resta...

PT-2026-93399

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description An issue exists within the gRPC Network Security Interface gNSI Authz Rotate RPC that may allow an incorrect Authz policy, uploaded during an ongoing RPC stream, to become active. This iss...

CVE-2026-77190: Improper Input Validation

On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically...

CVE-2026-73455: Improper Handling of Length Parameter Inconsistency

On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly...

CVE-2026-73436: Improper Validation of Specified Quantity in Input

On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet from an adjacent OSPF neighbor may cause OSPF to restart unexpectedly...

CVE-2026-73435: Insufficient Verification of Data Authenticity

On affected platforms running Arista EOS with Open Shortest Path First version 2 OSPFv2 configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on the same broadcast segment, with OSPFv2 authentication configured can cause adjacency flapping and packet loss. The disruption...

CVE-2026-73463: Concurrent Execution using Shared Resource with Improper Synchronization

On affected platforms running Arista EOS, when multiple gRPC Network Security Interface gNSI transports are configured, a race condition in the gNSI Authz service may cause a policy rotation to fail silently. An authenticated user whose access was revoked by the new policy may retain unauthorized...

CVE-2026-73447: Improper Neutralization of Special Elements used in an OS Command

A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leading to full device compromise. An authenticated user can exploit gRPC Network Security Interface gNSI Certz service on Arista EOS-based products to escalate privileges and execute arbitrary...

CVE-2026-73450: Insufficient Verification of Data Authenticity

On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attacker with access to the Dual Primary Detection network segment can send specially crafted packets to interfere with the dual-primary state. If the MLAG primary switch fails while these...

PT-2026-93365

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description On platforms running Arista EOS with gRPC Network Security Interface gNSI Credentialz configured, a specially crafted request can cause unintended modifications to the properties of a targ...

CVE-2026-19640: Incorrect Authorization

On affected platforms running Arista EOS, an authenticated user with access to the gNMI gRPC Network Management Interface may receive incorrect authorization results, potentially allowing access beyond their currently assigned permissions. This issue was discovered internally by Arista and the...

CVE-2026-73461: Incorrect Privilege Assignment

On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-gRPC OpenConfig requests such as...

PT-2026-93412

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description On platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, the OSPFv3 agent can restart unexpectedly when it receives a specially crafted packet...

Arista Networks EOS 802.1X Per-Supplicant ACL Bypass (SA0150) (CVE-2026-75943)

The version of Arista Networks EOS running on the remote device is affected by an access control bypass vulnerability as referenced in security advisory SA0150. - On affected releases of Arista EOS configured as an 802.1X authenticator with per-supplicant access control lists, traffic from an...

CVE-2026-73454: Improper Neutralization of Special Elements used in a Command

On affected platforms running Arista EOS with gRPC Network Security Interface gNSI Credentialz configured, a specially crafted request can cause unintended modifications to the target account's properties. This may result in the account being assigned elevated privileges or access beyond what an...

CVE-2026-73445: Improper Input Validation

On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface gNSI Authz Rotate RPC may cause an incorrect Authz policy which was uploaded in the ongoing RPC stream to become active. This does not affect Bootz. This issue was discovered internally by Arista and the...

CVE-2026-2380: Plaintext Storage of a Password

On affected platforms running Arista EOS with OpenConfig-related services i.e., gNMI, gNSI, RESTCONF and NETCONF, sensitive requests and responses may be unintentionally logged. These may be stored on the local EOS device or recorded on remote accounting servers. Note that gRPC-based streaming vi...