Arista Networks has 71 CVEs on record between 2025 and 2026. Disclosure cadence is accelerating: 70 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 45. The median CVSS is 6.5 (medium), with 8 rated critical. 1% have been exploited in the wild, in line with the corpus average. The dominant weakness classes are CWE-532 (6) and CWE-121 (3). Most affected products: EOS (42), CloudVision CUE (9), CloudVision Portal (8).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 1% vs 1% corpus
- Median CVSS
- 6.5
- Publish → KEV
- —(1)
- Last 90 days
- 70 prev 0
Products
- EOS 42
- CloudVision CUE 9
- CloudVision Portal 8
- Wi-Fi Access Points 7
- VeloCloud Edge 3
- VeloCloud 1
Worst active — by depth score
CVE-2026-114625Critical· 9.9Security Advisory 019980CVE-2026-73456Critical· 10.0Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting a…55CVE-2026-73453Critical· 10.0An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with P4Runtime55CVE-2026-102159Critical· 9.8An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services54CVE-2026-86106Critical· 9.6An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification53
Arista Networks vulnerabilities
CVEs affecting Arista Networks, newest first. Open any entry for full detail, references, and exploit status.
71 CVEsRSS
CVE-2026-73467Medium· 6.3On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers
On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers
CVE-2026-73466Medium· 6.3On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit th…
On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit th…
CVE-2026-73465Medium· 6.3On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exp…
On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exp…
CVE-2026-73451Medium· 4.8On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of second…
On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of second…
CVE-2026-19641Medium· 5.3On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions
On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources,…
CVE-2026-77191Low· 2.6An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send unrestricted traffic during a brief window (milliseconds to seconds) between the completion of the authentication phase and the …
An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send unrestricted traffic during a brief window (milliseconds to seconds) between the completion of the authentication phase and the …
CVE-2026-75943Low· 2.6A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout
A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass w…
CVE-2026-75944Low· 2.6A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system
A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants, resulting in incorrect access contro…
CVE-2026-75945Low· 2.6A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.
A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.
CVE-2026-73449Medium· 5.9On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segment who induces a RADIUS packet throug…
On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segment who induces a RADIUS packet throug…
CVE-2025-3456Low· 3.8On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs
On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs. Knowledge of both the encryption key and protocol specific encrypted secrets from t…