CVE-2026-121368

Platforms running Arista EOS are vulnerable to a system reboot via a CWE-787 (Out-of-bounds Write) . This occurs when Bidirectional Forwarding Detection (BFD) is configured to use keyed MD5 or keyed SHA1 authentication. An unauthenticated attacker with network adjacency (direct or multi-hop) to a...

EUVD-2026-122818

On affected platforms running Arista EOS with Bidirectional Forwarding Detection BFD configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency direct or multi-hop to a BFD-enabled interface can send a specially crafted BFD packet resulting in a...

PT-2026-144648

On affected platforms running Arista EOS with Bidirectional Forwarding Detection BFD configured to use keyed MD5 or keyed SHA1 authentication, an unauthenticated attacker with network adjacency direct or multi-hop to a BFD-enabled interface can send a specially crafted BFD packet resulting in a...