CVE-2026-102069

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is...

CVE-2026-102069

A Stack-based Buffer Overflow vulnerability exists in the dot1x daemon of Juniper Networks Junos OS devices when operating as Junos Fusion Aggregation Devices . The flaw is triggered when dot1x synchronization is enabled for the required Fusion satellite topology. An adjacent attacker acting as a...

EUVD-2026-101438

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is...

CVE-2026-102069 Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is...

CVE-2026-102069: Stack-based Buffer Overflow

A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via. The issue is...

PT-2026-113909

🚨 CVE-2026-102069 A Stack-based Buffer Overflow vulnerability in the dot1x daemon of Juniper Networks Junos OS devices operating as Junos Fusion Aggregation Devices allows an adjacent attacker acting as the configured ICCP peer to cause a denial of service and potentially execute code as root via...

EUVD-2026-78214

A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued...

EUVD-2026-78211

A brief milliseconds to seconds traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement...

CVE-2026-75945

A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued...

CVE-2026-75945

Arista EOS 4.36.1F is affected by a race condition (CWE-459 Incomplete Cleanup) in the 802.1X authenticator mode with per-supplicant ACL enforcement. When the clear dot1x host all command is issued, the race condition may leave a supplicant in an authorized state, allowing it to continue transmit...

CVE-2026-75945 A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.

A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued...

CVE-2026-75945 A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.

A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued...

CVE-2026-75943 A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcem

A brief milliseconds to seconds traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement...

CVE-2026-75943 A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcem

A brief milliseconds to seconds traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement...

CVE-2026-75943

Arista EOS contains a brief traffic leak (milliseconds to seconds) in 802.1X with ACL-based authorization . When an authenticated supplicant is removed via the clear dot1x host all command or due to a supplicant timeout, its traffic may pass without ACL enforcement due to incomplete cleanup (CWE-...

PT-2026-91760

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition occurs where a supplicant may remain in an authorized state even after a clear dot1x host all command is issued. A race condition is a situation...

PT-2026-91749

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A brief traffic leak lasting from milliseconds to seconds may occur when an authenticated supplicant is removed. This happens either through the clear dot1x host...

MikroTik RouterOS <= 7.20 Authentication Bypass via Improper Certificate Validation (CVE-2025-42611)

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS 7.x prior to or equal to 7.20. It is, therefore, affected by an authentication bypass vulnerability caused by improper certificate validation. The vulnerability lies in shared certificat...

EUVD-2025-209639

RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes OpenVPN, CAPsMAN, Dot1x 802.1X, among others. The vulnerability lies in shared certificate validation logic which uses th...

CVE-2025-42611

RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes OpenVPN, CAPsMAN, Dot1x 802.1X, among others. The vulnerability lies in shared certificate validation logic which uses th...