CVE-2026-73440

On affected platforms running Arista EOS with Simple Network Management Protocol SNMP configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An authenticated user who gains access to thi...

CVE-2026-59969

Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted pe...

CVE-2026-73436

On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet from an adjacent OSPF neighbor may cause OSPF to restart unexpectedly...

CVE-2026-19640

On affected platforms running Arista EOS, an authenticated user with access to the gNMI gRPC Network Management Interface may receive incorrect authorization results, potentially allowing access beyond their currently assigned permissions. This issue was discovered internally by Arista and the...

CVE-2026-86585 Improper Verification of the Firmware Signature vulnerability

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86585

CVE-2026-86585 affects VEO and VEO-XS Wi-Fi monitors (Fermax) in versions prior to 01.48.001 . The root cause is the lack of signature verification on firmware update packages, allowing an attacker who controls the delivery of an update to install unauthorised firmware on the device. The attack v...

EUVD-2026-80391

The lack of signature verification of firmware update packages in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker who controls the delivery of an update to install unauthorised firmware...

CVE-2026-86106

This Arista VeloCloud Edge vulnerability (CWE-306, Missing Authentication for Critical Function) allows an unauthenticated attacker with Layer 2 access to the private HA interconnect to trigger sensitive HA peer functions without verification, potentially resulting in elevated command execution o...

EUVD-2026-80390

An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled...

CVE-2026-86106 Security Advisory 0179

An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification. This could result in elevated command execution on Edge units where HA is enabled...

CVE-2026-77190

CVE-2026-77190 affects Arista EOS where an unauthenticated, network-adjacent attacker can send malformed PIM Sparse Mode messages to a device with both PIM SM and MLAG configured, causing the Pimsm agent to crash. Repeated attacks produce a sustained denial of service through continuous agent res...

EUVD-2026-80388

On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically...

CVE-2026-77190 Security Advisory 0177

On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically...

CVE-2026-92081

A flaw was found in fastify. When a route registers a response trailer and is served over HTTP/2, fastify incorrectly sets the 'Transfer-Encoding: chunked' header. This leads to an unhandled exception in Node.js, causing the server process to crash and resulting in a Denial of Service DoS. A...

CVE-2026-86474

CVE-2026-86474 affects VEO and VEO-XS Wi-Fi monitors (by Fermax) in versions prior to 01.48.001 . The root cause is the lack of TLS certificate validation when downloading firmware updates, which allows an attacker to perform man-in-the-middle (MITM) attacks on the update channel. The CVSS 4.0 ba...

CVE-2026-86474 Improper Certificate Validation in the Firmware Download vulnerability

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

EUVD-2026-80386

The lack of TLS certificate validation when downloading firmware updates in VEO and VEO-XS Wi-Fi monitors, in versions prior to 01.48.001, allows an attacker to perform man-in-the-middle attacks on the update channel...

Securing the unpatchable in an age of AI-driven vulnerabilities

AI is accelerating vulnerability discovery, leaving unpatchable operational technology OT systems at risk. Hoping for the best is not a viable anti-exploitation strategy. Deploying next-generation firewalls directly upstream allows for virtual patching through deep packet inspection. These system...

NightEagle targets Russian companies

Over the past year, our Global Emergency Response Team GERT has investigated several incidents involving the NightEagle group APT-Q-95. This group has been active since at least 2023 and originally focused on organizations in Asia, as we reported previously. We have now identified attacks by the...

CVE-2026-73468 Security Advisory 0175

A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period...