<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="/custom_data/rss_style/rss.xsl"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/">
  <channel>
    <title>Arista Networks :: Security Advisories</title>
		<description><![CDATA[Arista Networks :: Security Advisories]]></description>
		<link>https://www.arista.com/en/support/advisories-notices/security-advisory</link>
		<lastBuildDate>Wed, 29 Jul 2026 05:14:07 +0000</lastBuildDate>
		<atom:link rel="self" type="application/rss+xml" href="https://www.arista.com/en/support/advisories-notices/security-advisory-rss"/>
		<language>en-gb</language>
		<copyright>© 2026 Arista Networks, Inc. All rights reserved.</copyright>
		<managingEditor>webadmin@arista.com (Web Admin)</managingEditor>
		<item>
			<title>Security Advisory 0145</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24365-security-advisory-0145</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24365-security-advisory-0145</guid>
			<description><![CDATA[
Date: July 27, 2026 



Revision
Date
Changes


1.0
July 27, 2026
Initial release



 
Description: SQL injection in a flow metrics API method enabling server-side request forgery CVE: CVE-2026 -17191 CVSSv3.1 Base Score: 9.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) CVSSv4.0 Base Score: 8.5 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/S:P) Common Weakness Enumeration: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injec ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 27 Jul 2026 05:01:22 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0144</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24364-security-advisory-0144</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24364-security-advisory-0144</guid>
			<description><![CDATA[
Date: July 27, 2026



Revision
Date
Changes


1.0
July 27, 2026
Initial release



 
The CVE-ID tracking this issue: CVE-2026-16812 CVSSv3.1 Base Score: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 10.0 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P) Common Weakness Enumeration: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') This vulnerability is being tracked by BUG 1901675
D ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 27 Jul 2026 04:59:42 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0143</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24112-security-advisory-0143</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24112-security-advisory-0143</guid>
			<description><![CDATA[
Date: June 23, 2026



Revision
Date
Changes


1.0
Jun 23, 2026
Initial release


1.1
Jul 24, 2026
Clarification of certain details



Description
All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with the Streaming Telemetry Agent (aka TerminAttr) enabled. This issue primarily affects customers using the Streaming Telemetry Agent to connect to CloudVision or a gNMI server.
All of these issues were discovered internally by Arista and  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 23 Jun 2026 00:37:30 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0142</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24111-security-advisory-0142</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24111-security-advisory-0142</guid>
			<description><![CDATA[
Date: June 23, 2026



Revision
Date
Changes


1.0
June 23, 2026
Initial release


1.1
July 8, 2026
Updated Resolution and Mitigation sections



The CVE-ID tracking this issue: CVE-2026-12546 CVSSv3.1 Base Score: 6.0 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L)CVSSv4.0 Base Score: 5.1 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:L/SI:L/SA:L) Common Weakness Enumeration: CWE-288: Authentication Bypass Using an Alternate Path or Channel This vulnerability is being  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 23 Jun 2026 00:35:10 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0141</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24108-security-advisory-0141</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24108-security-advisory-0141</guid>
			<description><![CDATA[
Date: June 16, 2026
 
 



Revision
Date
Changes


1.0
June 16, 2026
Initial release



CVSSv3.1 Base Score: 8.2 (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N) CVSSv4.0 Base Score: 5.3 (CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N) Common Weakness Enumeration: CWE-653 (Insufficient Compartmentalization)
 
This vulnerability is being tracked by BUG 1787021
Description
The purpose of this advisory is to provide an announcement regarding potential vulnerabi ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 15 Jun 2026 21:20:27 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0140</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24074-security-advisory-0140</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24074-security-advisory-0140</guid>
			<description><![CDATA[
Date: June 3, 2026



Revision
Date
Changes


1.0
June 3, 2026
Initial release



 
 
The CVE-ID tracking this issue: CVE-2026-10040 CVSSv3.1 Base Score: 6.0 (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) CVSSv4.0 Base Score: 6.8 (CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-348: Use of Less Trusted Source This vulnerability is being tracked by BUG1315802
Description
A user with local eos-admin privileges on affected Arist ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 01 Jun 2026 23:27:32 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0139</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24029-security-advisory-0139</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24029-security-advisory-0139</guid>
			<description><![CDATA[
Date: May 19, 2026



Revision
Date
Changes


1.0
May 19, 2026
Initial release



The CVE-ID tracking this issue: CVE-2025-49844 CVSSv3.1 Base Score: 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-416 Use After FreeThis vulnerability is being tracked by BUG1140119 and BUG1391625
Description
On affected Arista platforms running Media Control Service (M ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 18 May 2026 22:50:28 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0138</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24019-security-advisory-0138</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24019-security-advisory-0138</guid>
			<description><![CDATA[
Date: May 8, 2026
 



Revision
Date
Changes


1.0
May 8, 2026
Initial release


1.1
May 18, 2026
Updated affected products and added Mitigation section


1.2
July 15, 2026
Updated CVE-ID's tracking this issueUpdated Affected SoftwareAdded Resolution section



 
The CVE-ID’s tracking this issue: CVE-2026-43284, CVE-2026-43500, and CVE-2026-43503.
Description
Arista Networks is providing this security update in response to a recent, publicly disclosed security vuln ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Fri, 08 May 2026 22:22:55 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0137</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137</guid>
			<description><![CDATA[
Date: May 5, 2026



Revision
Date
Changes


1.0
May 5, 2026
Initial release


1.1
May 7, 2026
Clarified 7280R3, 7500R3 and 7800R3 exposure is limited


1.2
May 13, 2026
Updated Mitigation section with a note of caution


1.3
May 20, 2026
Updated Approach 2 - Applying ACL on Decapsulation Switches



The CVE-ID tracking this issue: CVE-2026-7473 CVSSv3.1 Base Score: 5.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) CVSSv4.0 Base Score: 6.8 (CVSS:4.0/AV:N/AC:L/AT: ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 05 May 2026 03:41:31 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0136</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24004-security-advisory-0136</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24004-security-advisory-0136</guid>
			<description><![CDATA[
Date: May 1, 2026



Revision
Date
Changes


1.0
May 1, 2026
Initial release


1.1
May 7, 2026
Additional required configuration for exploitation information added


1.2
May 11, 2026
Advisory updated with additional mitigations.



The CVE-ID tracking this issue: CVE-2026-31431 CVSSv3.1 Base Score: 7.8 (CVSS:3.1/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Common Weakness Enumeration: CWE-1288: Improper Validation of Consistency within Input
This vulnerability is bei ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Sat, 02 May 2026 00:09:38 +0000</pubDate>
		</item>
	</channel>
</rss>