AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Arista Networks security advisories

49 advisories · 25 critical or high in 12 months · latest Sep 22

Advisories page

49 advisories

Critical 9.5Sep 22Arista Networks VeloCloud Orchestrator: remote attacker could access privileged...CVE-2026-93952no fix yetCritical 9.2Sep 16Arista Networks EOS: remote code executionCVE-2026-73456no fix yetMedium 6.0Sep 16Arista Networks EOS: secrets in logsCVE-2026-73457no fix yetHigh 7.1Sep 16Arista Networks EOS: out-of-bounds readCVE-2026-73462no fix yetLow 2.1Sep 16Arista Networks EOS: secrets in logsCVE-2026-73442no fix yetMedium 5.3Sep 16Arista Networks EOS: denial of serviceCVE-2026-73443no fix yetHigh 8.7Sep 16Arista Networks VeloCloud Edge: missing authenticationCVE-2026-86106fixed in 5.2.0.0 +3High 8.2Sep 16Arista Networks VeloCloud: out-of-bounds writeCVE-2026-86107fixed in 5.2.0.0 +3Medium 6.0Sep 16Arista Networks EOS: denial of serviceCVE-2026-77190no fix yetCritical 9.5Sep 16Arista Networks EOS: remote code executionCVE-2026-73453fixed in 4.34.0FHigh 8.9Sep 16On affected platforms running Arista EOS with Open Shortest Path First version...CVE-2026-73455fixed in 4.33.0FHigh 7.1Sep 16Arista Networks EOS: incorrect control flowCVE-2026-73468fixed in 4.33.0FMedium 6.9Sep 16Arista Networks EOS: improper authorizationCVE-2026-73469no fix yetHigh 7.0Sep 16Arista Networks EOS: insufficient authenticity checkCVE-2026-73435no fix yetMedium 6.0Sep 16Arista Networks EOS: out-of-bounds readCVE-2026-73436no fix yetHigh 7.0Sep 16Arista Networks EOS: reachable assertionCVE-2026-73438no fix yetLow 2.3Sep 16Arista Networks EOS: information disclosureCVE-2026-73440no fix yetLow 2.3Sep 16Arista Networks EOS: improper authorizationCVE-2026-19640no fix yetHigh 8.6Sep 16Arista Networks EOS: command injectionCVE-2026-73454fixed in 4.31.0F +2Critical 9.4Sep 16On affected EOS platforms with AAA-based gRPC authorization enabled for...CVE-2026-73461fixed in 4.30.0F +2Medium 6.0Sep 16Arista Networks EOS: race conditionCVE-2026-73463no fix yetHigh 8.7Sep 16Arista Networks EOS: remote code executionCVE-2026-73464fixed in 4.30.0F +3Medium 5.1Sep 16Arista Networks EOS: information disclosureCVE-2026-2380fixed in 4.36.0F +2High 7.7Sep 16On affected platforms running Arista EOSCVE-2026-73439no fix yetMedium 6.9Sep 16Arista Networks EOS: improper input validationCVE-2026-73445no fix yetCritical 9.4Sep 16Arista Networks EOS: code executionCVE-2026-73447fixed in 4.31.0F +2High 7.5Sep 16Arista Networks VeloCloud Edge: command injectionCVE-2026-86108fixed in 5.2.0High 7.5Sep 16Arista Networks VeloCloud Edge: improper signature checkCVE-2026-86109fixed in 5.2.0High 7.0Sep 16Arista Networks EOS: insufficient authenticity checkCVE-2026-73450no fix yetHigh 7.0Sep 16On affected platforms running Arista EOS with IS-IS configured on a broadcast...CVE-2026-73446no fix yetHigh 7.0Sep 16On affected platforms running Arista EOS with IS-IS configuredCVE-2026-73459no fix yetHigh 7.0Sep 16Arista Networks EOS: improper authorizationCVE-2026-73460no fix yetMedium 6.5Sep 15Arista Networks EOS: denial of serviceCVE-2026-73437no fix yetMedium 5.3Sep 15On affected platforms running Arista EOS with VRRPv2 IP Authentication HeaderCVE-2026-73444no fix yetHigh 7.1Sep 15Arista Networks EOS: improper input validationCVE-2026-19655no fix yetCritical 9.2Sep 15On affected platforms running Arista EOS with authenticated Bidirectional...CVE-2026-73458no fix yetMedium 6.0Sep 15Arista Networks EOS: secrets in logsCVE-2026-73465no fix yetMedium 6.0Sep 15Arista Networks EOS: secrets in logsCVE-2026-73466no fix yetMedium 6.0Sep 15Arista Networks EOS: secrets in logsCVE-2026-73467no fix yetMedium 6.3Sep 15On affected platforms running Arista EOS with dual switch cards and with...CVE-2026-73451no fix yetMedium 6.9Sep 15Arista Networks EOS: improper output encodingCVE-2026-19641no fix yetLow 2.1Sep 14Arista Networks EOS: missing authorizationCVE-2026-77191no fix yetLow 2.1Sep 14Arista Networks EOS: incomplete cleanupCVE-2026-75943no fix yetMedium 5.6Sep 14Arista Networks EOS: race conditionCVE-2026-75944no fix yetLow 2.1Sep 14Arista Networks EOS: race conditionCVE-2026-75945no fix yetMedium 5.9Sep 14Arista Networks EOS: improper access controlCVE-2026-73449no fix yetHigh 8.5Jul 27Arista Networks VeloCloud Orchestrator On-Prem: SQL injectionCVE-2026-17191fixed in 5.2.3.14 +2Medium 6.3Jul 27Arista Networks VeloCloud Orchestrator On-Prem: server-side request forgeryCVE-2026-17192fixed in 5.2.3.14 +2Critical 10.0Jul 27Arista Networks VeloCloud Orchestrator On-Prem: command injectionCVE-2026-16812fixed in 5.2.3.14 +3
About Arista Networks

Security advisories Arista Networks publishes for its own products.

www.arista.com/en/support/advisories-noticesArista Networks

Arista Networks elsewhere on Ibis: Quarterly · Paydays