EUVD-2026-122814

On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol BGP peer can send a crafted BGP message over an established session with the Dynamic Path Selection DPS address family negotiated. This can cause the BGP process to terminate unexpectedly, resetting all BGP sessio...

EUVD-2026-122811

On affected platforms running Arista EOS with Border Gateway Protocol BGP changing the BGP listen port from its default value disables default protective Access Control List ACL rules against unexpected BGP peering attempts...

EUVD-2026-122810

On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to crash. Successful exploitation causes the BGP agent process to terminate, resulting in the loss of all BGP sessions on the affected device and possible disruption to network routing...

EUVD-2026-122807

On affected platforms running Arista EOS in multi-agent routing model with BGP Segment Routing Traffic Engineering SR-TE address family configured, a BGP peer can send crafted BGP packets to cause the BGP process to restart, disrupting all BGP sessions on the device...

EUVD-2026-122804

On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the PE router can affect the route advertisements of VPLS pseudowires, causing a churn of the established routes with other legitimate BGP peers...

EUVD-2026-122805

On affected platforms running Arista EOS with Border Gateway Protocol BGP configured, An unauthenticated attacker who can establish a BGP peering session with an affected device and can send specially crafted BGP messages to cause repeated BGP session resets, enabling sustained disruption to...

EUVD-2026-122803

On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the PE routers can send a specially crafted BGP packet to cause the BGP agent to restart unexpectedly...

EUVD-2026-122801

On affected Arista EOS platforms running Border Gateway Protocol with Link State BGP-LS and configured with the Dynamic Path Selection DPS consumer role, an attacker who has established an authenticated BGP-LS session with the device can send a crafted message to cause the BGP agent to restart...

EUVD-2026-122802

This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link State BGP-LS configured for Dynamic Path Selection DPS. On affected platforms running Arista EOS with BGP-LS configured for DPS, an attacker who has established an authenticated...

CVE-2026-121293

Affected EOS-based platforms are vulnerable to a BGP process crash. An attacker controlling a Border Gateway Protocol (BGP) peer can send a crafted BGP message over an established session where the Dynamic Path Selection (DPS) address family is negotiated. This interaction, associated with CWE-47...

CVE-2026-121290

Affected platforms running Arista EOS with Border Gateway Protocol (BGP) are vulnerable because changing the BGP listen port from its default value disables default protective Access Control List (ACL) rules. This configuration change allows for unexpected BGP peering attempts , potentially impac...

CVE-2026-121291

A vulnerability in EOS allows an attacker to send a crafted Error Report that causes the system to become stuck in a state where it believes a cache reset is currently in progress. This condition prevents critical operations, including ROA publication , withdrawal reconciliation , and BGP origin-...

CVE-2026-121289

On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to crash due to a stack-based buffer overflow (CWE-121) . Successful exploitation results in the termination of the BGP agent process, leading to the loss of all BGP sessions and poten...

CVE-2026-121286

Affected platforms running Arista EOS in a multi-agent routing model with the BGP Segment Routing Traffic Engineering (SR-TE) address family configured are vulnerable to a denial of service. A BGP peer can send crafted BGP packets that trigger a restart of the BGP process , resulting in the disru...

CVE-2026-120982

Platforms running Arista EOS with Border Gateway Protocol (BGP) configured are vulnerable to a flaw where an unauthenticated attacker can cause repeated BGP session resets. By establishing a BGP peering session and sending specially crafted BGP messages , an attacker can achieve sustained disrupt...

CVE-2026-120981

Affected platforms running Arista EOS with VPLS-BGP enabled are vulnerable to an issue where an attacker, having established a BGP session with the PE router, can influence VPLS pseudowire route advertisements. This action causes a churn of established routes with other legitimate BGP peers. The ...

CVE-2026-120980

On affected platforms running Arista EOS with VPLS-BGP enabled, a vulnerability exists where an attacker who has established a BGP session with the PE routers can send a specially crafted BGP packet . This action causes the BGP agent to restart unexpectedly , leading to a high impact on availabil...

CVE-2026-120979

This vulnerability affects Arista Pathfinder for WAN path selection when BGP-LS is configured for Dynamic Path Selection (DPS) on platforms running Arista EOS . An attacker who has established an authenticated BGP-LS session with the device can transmit a specially crafted BGP packet. This action...

CVE-2026-120978

Affected Arista EOS platforms running BGP-LS with the Dynamic Path Selection (DPS) consumer role are vulnerable to a NULL Pointer Dereference (CWE-476) . An attacker who has established an authenticated BGP-LS session can send a crafted message to cause the BGP agent to restart unexpectedly. This...

pybatfish

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...