<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="/custom_data/rss_style/rss.xsl"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/">
  <channel>
    <title>Arista Networks :: Security Advisories</title>
		<description><![CDATA[Arista Networks :: Security Advisories]]></description>
		<link>https://www.arista.com/en/support/advisories-notices/security-advisory</link>
		<lastBuildDate>Sun, 18 Oct 2026 21:29:02 +0000</lastBuildDate>
		<atom:link rel="self" type="application/rss+xml" href="https://www.arista.com/en/support/advisories-notices/security-advisory-rss"/>
		<language>en-gb</language>
		<copyright>© 2026 Arista Networks, Inc. All rights reserved.</copyright>
		<managingEditor>webadmin@arista.com (Web Admin)</managingEditor>
		<item>
			<title>Security Advisory 0198</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24814-security-advisory-0198</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24814-security-advisory-0198</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-102165 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)CVSSv4.0 Base Score: 7.7 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)Common Weakness Enumeration: CWE-121: Stack-based Buffer Overflow This vulnerability is being tracked by BUG 1846910
Description
On affected Arista Wi-Fi access points, an unauthentica ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:32:39 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0197</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-102167 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)CVSSv4.0 Base Score: 9.0 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)Common Weakness Enumeration: CWE-121: Stack-based Buffer Overflow This vulnerability is being tracked by BUG 1846909
Description
On affected Arista Wi-Fi access points, a memory corrup ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:32:19 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0196</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24812-security-advisory-0196</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24812-security-advisory-0196</guid>
			<description><![CDATA[
Date: October 6, 2026
 



Revision
Date
Changes


1.0
October 6, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-102164 CVSSv3.1 Base Score: 3.1 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)CVSSv4.0 Base Score: 2.3 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)Common Weakness Enumeration: CWE-125: Out-of-bounds ReadThis vulnerability is being tracked by BUG1774082.
Description
On affected Arista access points configured with VXLAN tunnell ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:31:57 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0195</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24811-security-advisory-0195</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24811-security-advisory-0195</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-102163 CVSSv3.1 Base Score: 8.8 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)CVSSv4.0 Base Score: 8.7 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L)Common Weakness Enumeration: CWE-787: Out-of-bounds WriteThis vulnerability is being tracked by BUG 1774048
Description
On affected Arista access points with Wireless Intrusion Prevent ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:31:37 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0194</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24810-security-advisory-0194</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24810-security-advisory-0194</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release



Description
Two security vulnerabilities have been identified in Arista access point firmware affecting the Captive Portal feature. Both vulnerabilities allow an unauthenticated wireless client that is associated with a captive-portal-enabled SSID to crash the portal service with a single crafted HTTP request.
All of these issues were discovered internally by Arista, and the company is not  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:31:19 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0192</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24808-security-advisory-0192</guid>
			<description><![CDATA[
Date: October 6, 2026
 



Revision
Date
Changes


1.0
October 6, 2026
Initial release



Description
All of the CVEs covered in this advisory affect only CloudVision-CUE on-premises. CV-CUE is Arista’s Wi-Fi management service and, in on-premises deployments, is hosted as a service on the CloudVision Portal on-premises platform. Customers running CV-CUE services should review the affected versions to assess their impact.
This issue was discovered internally by Arista, and th ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:30:40 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0193</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24809-security-advisory-0193</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24809-security-advisory-0193</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-102162 CVSSv3.1 Base Score: 8.8 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)CVSSv4.0 Base Score: 9.4 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)Common Weakness Enumeration: CWE-121: Stack-based Buffer OverflowThis vulnerability is being tracked by BUG 1774040
Description
On affected Arista Wi-Fi access points with captive port ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:30:40 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0191</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24807-security-advisory-0191</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24807-security-advisory-0191</guid>
			<description><![CDATA[
Date: October 6, 2026
 



Revision
Date
Changes


1.0
October 6, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-102156 CVSSv3.1 Base Score: 6.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) CVSSv4.0 Base Score: 6.9 (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N) Common Weakness Enumeration: CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')This vulnerability is being tracked by BUG 173 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:30:18 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0190</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24806-security-advisory-0190</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24806-security-advisory-0190</guid>
			<description><![CDATA[
Date: October 6, 2026
 



Revision
Date
Changes


1.0
October 6, 2026
Initial release



Description
All of the CVEs covered in this advisory affect only CloudVision-CUE on-premises. CV-CUE is Arista’s Wi-Fi management service and, in on-premises deployments, is hosted as a service on the CloudVision Portal on-premises platform. Customers running CV-CUE services should review the affected versions to assess their impact.
These issues were discovered internally by Arista, and ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:29:51 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0189</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24805-security-advisory-0189</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24805-security-advisory-0189</guid>
			<description><![CDATA[
Date: October 6, 2026
 



Revision
Date
Changes


1.0
October 6, 2026
Initial release


1.1
October 13, 2026
Updated Resolution section to include the 2026.3.0 release



Description
All CVEs covered in this advisory affect platforms running CloudVision Portal (On-Premises), where insufficient validations in the Software Management Studio Software Repository and the Network Provisioning Image Repository could allow an authenticated remote attacker with specific permissio ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:29:29 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0188</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24804-security-advisory-0188</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24804-security-advisory-0188</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release


1.1
October 13, 2026
Updated Resolution section to include the 2026.3.0 release



The CVE-ID tracking this issue: CVE-2026-101153 CVSSv3.1 Base Score: 8.0 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 7.2 (CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H) Common Weakness Enumeration:CWE-22: Improper Limitation of a Pathname to a Restricted Directory ( ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:29:01 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0187</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24803-security-advisory-0187</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24803-security-advisory-0187</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release


1.1
October 13, 2026
Updated Resolution section to include the 2026.3.0 release



Description
All CVEs covered in this advisory affect CloudVision Portal (On-Premises), where specially crafted requests could result in user redirection to arbitrary URLs.
The below issues were discovered internally by Arista, and the company is not aware of any malicious exploitation of these vulnerabili ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:28:38 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0186</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24802-security-advisory-0186</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24802-security-advisory-0186</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release


1.1
October 13, 2026
Updated Resolution section to include the 2026.3.0 release



Description
All CVEs covered in this advisory affect platforms running CloudVision Portal (on-premises) where OpenID Connect (OIDC)-based single sign-on (SSO) is configured with an identity provider. OIDC SSO is an optional, explicitly configured authentication method. Deployments using non-OIDC SSO method ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:28:15 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0185</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24801-security-advisory-0185</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24801-security-advisory-0185</guid>
			<description><![CDATA[
Date: October 6, 2026



Revision
Date
Changes


1.0
October 6, 2026
Initial release


1.1
October 13, 2026
Updated Resolution section to include the 2026.3.0 release



The CVE-ID tracking this issue: CVE-2026-101158 CVSSv3.1 Base Score: 8.4 (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.3 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-79: Improper Neutralization of Input During Web Page Generation  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 02 Oct 2026 15:27:35 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0184</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24776-security-advisory-0184</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24776-security-advisory-0184</guid>
			<description><![CDATA[
September 29, 2026



Revision
Date
Changes


1.0
September 29, 2026
Initial release


1.1
October 6, 2026
Updated information



Update Type:
Informational
Background
Recent enhancements to our vulnerability detection processes have resulted in a higher-than-usual volume of security updates. Arista is providing this advance notification to help our customers plan. To streamline remediation efforts and allow customers to address them in a consolidated maintenance window, ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 28 Sep 2026 22:55:19 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0183</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183</guid>
			<description><![CDATA[
Date: September 22, 2026



Revision
Date
Changes


1.0
September 22, 2026
Initial release


1.1
September 23, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-93952 CVSSv3.1 Base Score: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSSv4.0 Base Score: 9.5 (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-20: Improper Input Validation This vulnerability is being tracked by BUG1907167, and BUG1937417 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 21 Sep 2026 23:53:08 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0182</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24738-security-advisory-0182</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24738-security-advisory-0182</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-86109 CVSSv3.1 Base Score: 6.6 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) CVSSv4.0 Base Score: 7.5 (CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-347: Improper Verification of Cryptographic Signature This vulnerability is being tracked by B ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:08:34 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0181</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24737-security-advisory-0181</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24737-security-advisory-0181</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-86108 CVSSv3.1 Base Score: 8.0 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 7.5 (CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Th ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:08:07 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0180</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24736-security-advisory-0180</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24736-security-advisory-0180</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-86107 CVSSv3.1 Base Score: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 8.2 (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-787 Out-of-bounds Write This vulnerability is being tracked by BUG 1833888
Description
The Velo ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:07:24 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0179</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-86106CVSSv3.1 Base Score: 9.6 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)CVSSv4.0 Base Score: 8.7 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)Common Weakness Enumeration: CWE-306: Missing Authentication for Critical FunctionThis vulnerability is being tracked by BUG1833882. ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:05:46 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0178</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24734-security-advisory-0178</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24734-security-advisory-0178</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added


1.2
September 24, 2026
Update regarding the workaround for resolution and target release versions for DMF fixes



The CVE-ID tracking this issue: CVE-2026-73440 CVSSv3.1 Base Score: 4.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) CVSSv4.0 Base Score: 2.3 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N) Common Weak ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:04:54 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0177</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24733-security-advisory-0177</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24733-security-advisory-0177</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 17, 2026
Moved 7368X4 Series to Affected


1.2
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-77190CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 6.0 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LCommon Weakness Enumeration: CWE-20 Improper Input ValidationThis vulne ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:02:59 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0176</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24732-security-advisory-0176</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24732-security-advisory-0176</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73469 CVSSv3.1 Base Score: 5.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) CVSSv4.0 Base Score: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-863: Incorrect Authorization This vulnerability is being tracked by BUG 1353206
Description
Whe ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:01:55 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0175</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24731-security-advisory-0175</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24731-security-advisory-0175</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73468 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 7.1 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L) Common Weakness Enumeration: CWE-670: Always-Incorrect Control Flow Implementation This vulnerability is being tracked by BUG 1857 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:01:18 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0174</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24730-security-advisory-0174</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24730-security-advisory-0174</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73453 CVSSv3.1 Base Score: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.5 (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-94: Improper Control of Generation of Code ('Code Injection') This vulnerability is being tra ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:00:18 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0173</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24729-security-advisory-0173</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24729-security-advisory-0173</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73455 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 8.9 (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H)Common Weakness Enumeration: CWE-130: Improper Handling of Length Parameter InconsistencyThis vulnerability is being tracked by BUG ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:59:41 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0172</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24728-security-advisory-0172</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24728-security-advisory-0172</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73438 CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 7.0 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H) Common Weakness Enumeration: CWE-617: Reachable Assertion This vulnerability is being tracked by BUG 1876199
Description
On affe ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:58:59 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0171</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24727-security-advisory-0171</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24727-security-advisory-0171</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73435 CVSSv3.1 Base Score: 8.2 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H) CVSSv4.0 Base Score: 7.0 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H) Common Weakness Enumeration: CWE-345: Insufficient Verification of Data Authenticity This vulnerability is being tracked by BUG 18 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:58:19 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0170</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24726-security-advisory-0170</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24726-security-advisory-0170</guid>
			<description><![CDATA[
Date: September 9, 2026  



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-19640 CVSSv3.1 Base Score: 4.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) CVSSv4.0 Base Score: 2.3 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-863: Incorrect Authorization This vulnerability is being tracked by BUG 1602635, BUG 1602639
D ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:57:36 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0169</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24725-security-advisory-0169</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24725-security-advisory-0169</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73463 CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) CVSSv4.0 Base Score: 6.0 (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization This vulnerabili ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:56:37 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0168</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24724-security-advisory-0168</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24724-security-advisory-0168</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-2380 CVSSv3.1 Base Score: 7.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) CVSSv4.0 Base Score: 5.1 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L) Common Weakness Enumeration: CWE-256: Plaintext Storage of a Password This vulnerability is being tracked by BUG 1207374
Descri ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:55:58 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0167</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24723-security-advisory-0167</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24723-security-advisory-0167</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73445 CVSSv3.1 Base Score: 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) CVSSv4.0 Base Score: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-20: Improper Input Validation This vulnerability is being tracked by BUG 1602625
Description ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:55:23 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0166</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24722-security-advisory-0166</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24722-security-advisory-0166</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73464 CVSSv3.1 Base Score: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSSv4.0 Base Score: 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-94 Improper Control of Generation of Code ('Code Injection') This vulnerability is being tracked  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:54:36 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0165</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24721-security-advisory-0165</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24721-security-advisory-0165</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73454 CVSSv3.1 Base Score: 8.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) CVSSv4.0 Base Score: 8.6 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') This vuln ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:53:17 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0164</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24720-security-advisory-0164</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24720-security-advisory-0164</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73439 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSSv4.0 Base Score: 7.7 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-842: Placement of User into Incorrect Group This vulnerability is being tracked by BUG 1602638
D ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:52:50 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0163</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24719-security-advisory-0163</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24719-security-advisory-0163</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73461 CVSSv3.1 Base Score: 8.0 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-266: Incorrect Privilege Assignment This vulnerability is being tracked by BUG 1602589
Descripti ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:52:14 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0162</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24718-security-advisory-0162</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24718-security-advisory-0162</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73447 CVSSv3.1 Base Score: 9.1 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-78 OS Command Injection This vulnerability is being tracked by BUG 1602632
Description
A vulner ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:51:45 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0161</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24717-security-advisory-0161</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24717-security-advisory-0161</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73450 CVSSv3.1 Base Score: 6.9 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H) CVSSv4.0 Base Score: 7 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H) Common Weakness Enumeration: CWE-345: Insufficient Verification of Data Authenticity This vulnerability is being tracked by BUG18527 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:50:59 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0160</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



Description
All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with Intermediate System to Intermediate System (IS-IS) configured. In all three cases, an unauthenticated attacker in the same Layer 2 domain as the target device can manipulate IS-IS protocol state, potentially bypassing the protections  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:50:23 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0159</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24715-security-advisory-0159</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24715-security-advisory-0159</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release


1.1
September 22, 2026
CSAF JSON file added



The CVE-ID tracking this issue: CVE-2026-73462 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 7.1 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-125 - Out-of-bounds read This vulnerability is being tracked by BUG1570495, BUG1571339
Descripti ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:49:36 +0000</pubDate>
		</item>
	</channel>
</rss>