93 matches found
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-83801 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-83801 Source advisory: OSV:PYSEC-2026-4110...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-83801 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-83801 Source advisory: OSV:GHSA-56V6-2FHR-WXGQ...
nautobot-chatops (>=1.6.0, <=1.7.1), nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0) +7 more potentially affected by CVE-2024-34707 via nautobot (>=1.0.3, <=1.5.16)
nautobot PYPI version =1.0.3, =1.6.0, =1.0.1a0, =1.1.0, =0.9.2.dev0, =1.5.0, =0.9.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2024-34707 Source advisory: OSV:PYSEC-2026-1688...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2024-32979 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2024-32979 Source advisory: OSV:PYSEC-2026-1686...
CVE-2025-5088
CVE-2025-5088 affects Arista CloudVision Exchange (CVX) via an authenticated Redis session that could grant full root access to all CVX servers. Exploitation requires network access to the Redis service and the Redis password, and Redis traffic is plaintext (TLS support tracked separately). The i...
CVE-2025-5088 Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session
An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have both network access to the Redis service on a CVX server and the Redis password. Please note that all Redis communication, including...
CVE-2025-5090 Arista CloudVision Exchange Cluster Instability via Unexpected Switch Messages
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service DoS scenario. Note that this would require the attacker to have a high privilege access...
CVE-2025-5090 Arista CloudVision Exchange Cluster Instability via Unexpected Switch Messages
CVX is not resilient to unexpected messages from a connected switch. This leads to agent crashes on CVX causing instability in the CVX cluster. An attacker could use this behavior to create a denial of service DoS scenario. Note that this would require the attacker to have a high privilege access...
CVE-2025-5090
CVE-2025-5090 affects Arista CloudVision Exchange (CVX) in Arista EOS-based deployments. The issue arises when CVX processes unexpected messages from a connected switch, leading to agent crashes on CVX and instability in the CVX cluster, enabling a DoS under high-privilege conditions on the conne...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-44798 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-44798 Source advisory: OSV:PYSEC-2026-2228...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-44794 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-44794 Source advisory: OSV:PYSEC-2026-2225...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-44797 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-44797 Source advisory: OSV:PYSEC-2026-2227...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-44796 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-44796 Source advisory: OSV:PYSEC-2026-2226...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-44797 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-44797 Source advisory: OSV:GHSA-C35Q-VXRP-PH26...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-44796 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-44796 Source advisory: OSV:GHSA-QRPW-GJVH-X5GM...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-44794 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-44794 Source advisory: OSV:GHSA-WPXJ-44W3-2J6X...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-34203 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-34203 Source advisory: OSV:GHSA-XMPV-J7P2-J873...
nautobot-chatops-arista-cloudvision (>=1.0.1a0, <=1.3.0), nautobot-chatops-meraki (>=1.1.0, <=1.2.0) +2 more potentially affected by CVE-2026-34203 via nautobot (1.5.16)
nautobot PYPI version 1.5.16 is affected by a known vulnerability. The following packages have a transitive dependency on nautobot and may be impacted: - nautobot-chatops-arista-cloudvision =1.0.1a0, =1.1.0, =1.5.0, =1.6.0 Source cves: CVE-2026-34203 Source advisory: OSV:PYSEC-2026-2224...
