<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="/custom_data/rss_style/rss.xsl"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/">
  <channel>
    <title>Arista Networks :: Security Advisories</title>
		<description><![CDATA[Arista Networks :: Security Advisories]]></description>
		<link>https://www.arista.com/en/support/advisories-notices/security-advisory</link>
		<lastBuildDate>Tue, 18 Aug 2026 10:36:50 +0000</lastBuildDate>
		<atom:link rel="self" type="application/rss+xml" href="https://www.arista.com/en/support/advisories-notices/security-advisory-csaf"/>
		<language>en-gb</language>
		<copyright>© 2026 Arista Networks, Inc. All rights reserved.</copyright>
		<managingEditor>webadmin@arista.com (Web Admin)</managingEditor>
		<item>
			<title>Security Advisory 0145</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_145_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_145_CSAF.json</guid>
			<description><![CDATA[
Date: July 27, 2026 



Revision
Date
Changes


1.0
July 27, 2026
Initial release


1.1
August 10, 2026
Added CSAF JSON file for download



 
Description: SQL injection in a flow metrics API method enabling server-side request forgery CVE: CVE-2026 -17191 CVSSv3.1 Base Score: 9.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) CVSSv4.0 Base Score: 8.5 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/S:P) Common Weakness Enumeration: CWE-89 Improper Neutrali ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 27 Jul 2026 05:01:22 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0144</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_144_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_144_CSAF.json</guid>
			<description><![CDATA[
Date: July 27, 2026



Revision
Date
Changes


1.0
July 27, 2026
Initial release


1.1
August 3, 2026
Updated Affected Platforms to include: VeloCloud Orchestrator Hosted


1.2
August 10, 2026
Added CSAF JSON file for download



 
The CVE-ID tracking this issue: CVE-2026-16812 CVSSv3.1 Base Score: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 10.0 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P) Common Weakness Enumerat ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 27 Jul 2026 04:59:42 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0143</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_143_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_143_CSAF.json</guid>
			<description><![CDATA[
Date: June 23, 2026



Revision
Date
Changes


1.0
Jun 23, 2026
Initial release


1.1
Jul 24, 2026
Clarification of certain details


1.2
August 10, 2026
Added CSAF JSON file for download



Description
All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with the Streaming Telemetry Agent (aka TerminAttr) enabled. This issue primarily affects customers using the Streaming Telemetry Agent to connect to CloudVision or a gNMI server.
 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 23 Jun 2026 00:37:30 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0142</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_142_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_142_CSAF.json</guid>
			<description><![CDATA[
Date: June 23, 2026



Revision
Date
Changes


1.0
June 23, 2026
Initial release


1.1
July 8, 2026
Updated Resolution and Mitigation sections


1.2
August 10, 2026
Added CSAF JSON file for download



The CVE-ID tracking this issue: CVE-2026-12546 CVSSv3.1 Base Score: 6.0 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L)CVSSv4.0 Base Score: 5.1 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:L/SI:L/SA:L) Common Weakness Enumeration: CWE-288: Authentication Bypass Us ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 23 Jun 2026 00:35:10 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0141</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_141_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_141_CSAF.json</guid>
			<description><![CDATA[
Date: June 16, 2026
 
 



Revision
Date
Changes


1.0
June 16, 2026
Initial release


1.1
August 10, 2026
Added CSAF JSON file for download



CVSSv3.1 Base Score: 8.2 (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) CVSSv4.0 Base Score: 5.3 (CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N) Common Weakness Enumeration: CWE-653 (Insufficient Compartmentalization)
 
This vulnerability is being tracked by BUG 1787021
Description
The purpose of this advisor ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 15 Jun 2026 21:20:27 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0137</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_137_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_137_CSAF.json</guid>
			<description><![CDATA[
Date: May 5, 2026



Revision
Date
Changes


1.0
May 5, 2026
Initial release


1.1
May 7, 2026
Clarified 7280R3, 7500R3 and 7800R3 exposure is limited


1.2
May 13, 2026
Updated Mitigation section with a note of caution


1.3
May 20, 2026
Updated Approach 2 - Applying ACL on Decapsulation Switches


1.4
August 10, 2026
Added CSAF JSON file for download



The CVE-ID tracking this issue: CVE-2026-7473 CVSSv3.1 Base Score: 5.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/ ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 05 May 2026 03:41:31 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0134</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_134_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_134_CSAF.json</guid>
			<description><![CDATA[
 
Date: February 17, 2026
 



Revision
Date
Changes


1.0
February 17, 2026
Initial release


1.1
August 10, 2026
Added CSAF JSON file for download



The CVE-ID tracking this issue: CVE-2026-2379 CVSSv3.1 Base Score: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)Common Weakness Enumeration: CWE-672: Operation on a Resource after Expiration or Release This vulnerability is being tracked by BUG 1188976
Description
On affected platforms with hardware IPSec support ru ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 17 Feb 2026 01:17:46 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0132</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_132_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_132_CSAF.json</guid>
			<description><![CDATA[
Date: December 30, 2025
 



Revision
Date
Changes


1.0
December 30, 2025
Initial release


1.1
February 3, 2026
Updated Required Configuration for Exploitation



The CVE-ID tracking this issue: CVE-2025-7048 CVSS:3.1 Base Score 4.3 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) CVSS:4.0 Base Score 5.3 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-805 Buffer Access with Incorrect Length Value This vulnerability is bein ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 29 Dec 2025 21:55:09 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0127</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_127_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_127_CSAF.json</guid>
			<description><![CDATA[
Date: November 18, 2025
 



Revision
Date
Changes


1.0
November 18, 2025
Initial release



The CVE-ID tracking this issue: CVE-2025-8873 CVSSv3.1 Base Score: 7.5(CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)CVSSv4.0 Base Score 8.7(CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)
Common Weakness Enumeration: CWE-1286: Improper Validation of Syntactic Correctness of InputThis vulnerability is being tracked by BUG 1246592
Description
On affected platforms run ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 17 Nov 2025 22:44:11 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0126</title>
			<link>https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_126_CSAF.json</link>
			<guid isPermaLink="true">https://www.arista.com/assets/data/SecurityAdvisories/CSAF/arista_networks_security_advisory_126_CSAF.json</guid>
			<description><![CDATA[
Date: November 18, 2025



Revision
Date
Changes


1.0
November 18, 2025
Initial release



The following issues were discovered during regular penetration testing of Arista’s EOS. Issues detailed cover CloudVision Exchange (CVX) based features including Media Control Services (MCS).
Issues covered in this Advisory:

CVE-2025-5088 - An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster
CVE-2025-5089 - Malformed messages rec ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 17 Nov 2025 22:36:51 +0000</pubDate>
		</item>
	</channel>
</rss>