CVE-2026-121371

On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem...

EUVD-2026-122821

On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem...

CVE-2026-121371 Security Advisory 0218

On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem...

PT-2026-144651

On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated, remote attacker to read arbitrary files, including sensitive credentials from the switch filesystem...

Security Advisory 0218

Security Advisory 0218 . CSAF PDF Date: November 10, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 10, 2026 | Initial release 1.1 | November 12, 2026 | Description clarification The CVE-ID tracking this issue: CVE-2026-121371 CVSSv3.1 Base Score: 7.5...