<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="/custom_data/rss_style/rss.xsl"?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:sy="http://purl.org/rss/1.0/modules/syndication/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/">
  <channel>
    <title>Arista Networks :: Security Advisories</title>
		<description><![CDATA[Arista Networks :: Security Advisories]]></description>
		<link>https://www.arista.com/en/support/advisories-notices/security-advisory</link>
		<lastBuildDate>Sun, 13 Sep 2026 08:56:26 +0000</lastBuildDate>
		<atom:link rel="self" type="application/rss+xml" href="https://www.arista.com/en/support/advisories-notices/security-advisory-rss"/>
		<language>en-gb</language>
		<copyright>© 2026 Arista Networks, Inc. All rights reserved.</copyright>
		<managingEditor>webadmin@arista.com (Web Admin)</managingEditor>
		<item>
			<title>Security Advisory 0182</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24738-security-advisory-0182</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24738-security-advisory-0182</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-86109 CVSSv3.1 Base Score: 6.6 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) CVSSv4.0 Base Score: 7.5 (CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-347: Improper Verification of Cryptographic Signature This vulnerability is being tracked by BUG1833886.
Description
The VeloCloud Edge softwar ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:08:34 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0181</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24737-security-advisory-0181</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24737-security-advisory-0181</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-86108 CVSSv3.1 Base Score: 8.0 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 7.5 (CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') This vulnerability is being tracked by BUG1857467, BU ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:08:07 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0180</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24736-security-advisory-0180</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24736-security-advisory-0180</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-86107 CVSSv3.1 Base Score: 5.9 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 8.2 (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-787 Out-of-bounds Write This vulnerability is being tracked by BUG 1833888
Description
The VeloCloud Edge and Gateway exhibit an out-of-bounds wri ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:07:24 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0179</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24735-security-advisory-0179</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-86106CVSSv3.1 Base Score: 9.6 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)CVSSv4.0 Base Score: 8.7 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)Common Weakness Enumeration: CWE-306: Missing Authentication for Critical FunctionThis vulnerability is being tracked by BUG1833882.
Description
On a VeloCloud Edge, an unauthenticat ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:05:46 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0178</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24734-security-advisory-0178</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24734-security-advisory-0178</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73440 CVSSv3.1 Base Score: 4.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) CVSSv4.0 Base Score: 2.3 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer This vulnerability is being tracked by BUG1856462(EOS) and BUG 1966273 (DM ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:04:54 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0177</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24733-security-advisory-0177</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24733-security-advisory-0177</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-77190CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 6.0 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LCommon Weakness Enumeration: CWE-20 Improper Input ValidationThis vulnerability is being tracked by BUG 1852734
Description
On affected platforms running Arista EOS, an unauthenticat ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:02:59 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0176</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24732-security-advisory-0176</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24732-security-advisory-0176</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73469 CVSSv3.1 Base Score: 5.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) CVSSv4.0 Base Score: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-863: Incorrect Authorization This vulnerability is being tracked by BUG 1353206
Description
When specific platforms are using Arista EOS with a lo ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:01:55 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0175</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24731-security-advisory-0175</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24731-security-advisory-0175</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73468 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 7.1 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L) Common Weakness Enumeration: CWE-670: Always-Incorrect Control Flow Implementation This vulnerability is being tracked by BUG 1857585
Description
On affected Arista EOS platforms  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:01:18 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0174</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24730-security-advisory-0174</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24730-security-advisory-0174</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73453 CVSSv3.1 Base Score: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.5 (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-94: Improper Control of Generation of Code ('Code Injection') This vulnerability is being tracked by BUG 1850014
Description
An unauthenticate ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 01:00:18 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0173</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24729-security-advisory-0173</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24729-security-advisory-0173</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73455 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 8.9 (CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H)Common Weakness Enumeration: CWE-130: Improper Handling of Length Parameter InconsistencyThis vulnerability is being tracked by BUG1307559
Description
On affected platforms running ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:59:41 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0172</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24728-security-advisory-0172</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24728-security-advisory-0172</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73438 CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 7.0 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H) Common Weakness Enumeration: CWE-617: Reachable Assertion This vulnerability is being tracked by BUG 1876199
Description
On affected platforms running Arista EOS with Open Shortes ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:58:59 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0171</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24727-security-advisory-0171</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24727-security-advisory-0171</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73435 CVSSv3.1 Base Score: 8.2 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H) CVSSv4.0 Base Score: 7.0 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H) Common Weakness Enumeration: CWE-345: Insufficient Verification of Data Authenticity This vulnerability is being tracked by BUG 1843809
The CVE-ID tracking this issue: CVE-2026-734 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:58:19 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0170</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24726-security-advisory-0170</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24726-security-advisory-0170</guid>
			<description><![CDATA[
Date: September 9, 2026  



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-19640 CVSSv3.1 Base Score: 4.2 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) CVSSv4.0 Base Score: 2.3 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-863: Incorrect Authorization This vulnerability is being tracked by BUG 1602635, BUG 1602639
Description
On affected platforms running Arista EO ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:57:36 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0169</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24725-security-advisory-0169</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24725-security-advisory-0169</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73463 CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) CVSSv4.0 Base Score: 6.0 (CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization This vulnerability is being tracked by BUG 1602636
Description
On ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:56:37 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0168</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24724-security-advisory-0168</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24724-security-advisory-0168</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-2380 CVSSv3.1 Base Score: 7.4 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) CVSSv4.0 Base Score: 5.1 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L) Common Weakness Enumeration: CWE-256: Plaintext Storage of a Password This vulnerability is being tracked by BUG 1207374
Description
On affected platforms running Arista EOS wit ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:55:58 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0167</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24723-security-advisory-0167</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24723-security-advisory-0167</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73445 CVSSv3.1 Base Score: 4.9 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) CVSSv4.0 Base Score: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-20: Improper Input Validation This vulnerability is being tracked by BUG 1602625
Description
On affected platforms running Arista EOS, an issue ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:55:23 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0166</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24722-security-advisory-0166</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24722-security-advisory-0166</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73464 CVSSv3.1 Base Score: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSSv4.0 Base Score: 8.7 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-94 Improper Control of Generation of Code ('Code Injection') This vulnerability is being tracked by BUG 1602598, BUG 1966288 (DMF)
Description
On  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:54:36 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0165</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24721-security-advisory-0165</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24721-security-advisory-0165</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73454 CVSSv3.1 Base Score: 8.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) CVSSv4.0 Base Score: 8.6 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') This vulnerability is being tracked by BUG 1602633
Descript ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:53:17 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0164</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24720-security-advisory-0164</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24720-security-advisory-0164</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73439 CVSSv3.1 Base Score: 7.5 (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) CVSSv4.0 Base Score: 7.7 (CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-842: Placement of User into Incorrect Group This vulnerability is being tracked by BUG 1602638
Description
On affected platforms running Arista EO ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:52:50 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0163</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24719-security-advisory-0163</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24719-security-advisory-0163</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73461 CVSSv3.1 Base Score: 8.0 (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-266: Incorrect Privilege Assignment This vulnerability is being tracked by BUG 1602589
Description
On affected platforms running Arista EOS, if AA ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:52:14 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0162</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24718-security-advisory-0162</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24718-security-advisory-0162</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73447 CVSSv3.1 Base Score: 9.1 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-78 OS Command Injection This vulnerability is being tracked by BUG 1602632
Description
A vulnerability in the gRPC Network Security Interface (gNS ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:51:45 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0161</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24717-security-advisory-0161</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24717-security-advisory-0161</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73450 CVSSv3.1 Base Score: 6.9 (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:H) CVSSv4.0 Base Score: 7 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H) Common Weakness Enumeration: CWE-345: Insufficient Verification of Data Authenticity This vulnerability is being tracked by BUG1852792
Description
On affected platforms running Aris ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:50:59 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0160</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



Description
All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with Intermediate System to Intermediate System (IS-IS) configured. In all three cases, an unauthenticated attacker in the same Layer 2 domain as the target device can manipulate IS-IS protocol state, potentially bypassing the protections offered by RFC 5304/5310 MD5 or SHA authentication. ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:50:23 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0159</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24715-security-advisory-0159</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24715-security-advisory-0159</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73462 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 7.1 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-125 - Out-of-bounds read This vulnerability is being tracked by BUG1570495, BUG1571339
Description
On affected platforms running Arista EOS with I ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:49:36 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0158</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



Description
Both CVE-2026-73456 and CVE-2026-73457 affect Arista EOS-based platforms with gRPC Network Packet Sampling Interface (gNPSI) configured. which is disabled by default.
These issues were discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.
CVE-2026-73456
Under certain circumstances, an unauthenticated gNPSI cl ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:48:58 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0157</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24713-security-advisory-0157</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24713-security-advisory-0157</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release



Description
All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with the Virtual Router Redundancy Protocol (VRRP) enabled.
In addition, CVE-2026-73444 and CVE-2026-73443 require version 2 (VRRPv2) configured with VRRPv2 authentication enabled. VRRPv2 is the default version for Arista EOS but VRRP Authentication is not enabled by default. VRRP vers ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:48:29 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0156</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24712-security-advisory-0156</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24712-security-advisory-0156</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73437 CVSSv3.1 Base Score: 9.6 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 6.5 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-345 Insufficient Verification of Data Authenticity This vulnerability is being tracked by BUG 1869660
Note: CVSS v3.1 captures impact on the second ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:47:46 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0155</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24711-security-advisory-0155</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24711-security-advisory-0155</guid>
			<description><![CDATA[



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-19655 CVSSv3.1 Base Score: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVSSv4.0 Base Score: 7.1 (CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-20 Improper Input Validation This vulnerability is being tracked by BUG 1770194
Description
On affected platforms running Arista EOS with Dynamic Host Configuration Protoc ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:42:08 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0154</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24710-security-advisory-0154</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24710-security-advisory-0154</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73458 CVSSv3.1 Base Score: 8.2 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H) CVSSv4.0 Base Score: 9.2 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:H) Common Weakness Enumeration: CWE-303: Incorrect Implementation of Authentication Algorithm This vulnerability is being tracked by BUG 1787150
Description
On affected platforms run ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:41:24 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0153</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24709-security-advisory-0153</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24709-security-advisory-0153</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



Description
On affected platforms running Arista EOS, under certain circumstances plaintext private keys (CVE-2026-73465), user passwords (CVE-2026-73466) or the shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers (CVE-2026-73467) may be written to the log files during operations.
To exploit these vulnerabilities, a malicious actor must  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:40:52 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0152</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24708-security-advisory-0152</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24708-security-advisory-0152</guid>
			<description><![CDATA[
Date: September 9, 2026
 



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-19641 CVSSv3.1 Base Score: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) CVSSv4.0 Base Score: 6.9 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-116: Improper Encoding or Escaping This vulnerability is being tracked by BUG 1595868, BUG 1966286 (DMF)
Description
On affected platforms runn ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:40:21 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0151</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24707-security-advisory-0151</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24707-security-advisory-0151</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73451 CVSS:3.1 Base Score: 4.8 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) CVSS:4.0 Base Score: 6.3 (CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N) Common Weakness Enumeration: CWE-1419: Incorrect Initialization of Resource This vulnerability is being tracked by BUG1262274
Description
On affected platforms running Arista EOS  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:39:39 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0150</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24706-security-advisory-0150</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24706-security-advisory-0150</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



Description
All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplicant policy enforcement. An authenticated supplicant on an adjacent network segment may, under specific conditions, send traffic without the intended ACL policy applied, bypassing  ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:38:59 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0149</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24705-security-advisory-0149</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24705-security-advisory-0149</guid>
			<description><![CDATA[
Date: September 9, 2026



Revision
Date
Changes


1.0
September 9, 2026
Initial release



The CVE-ID tracking this issue: CVE-2026-73449 CVSSv3.1 Base Score: 5.9 (CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:L) CVSSv4.0 Base Score: 5.9 (CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:L) Common Weakness Enumeration: CWE-290 (Authentication Bypass by Spoofing) This vulnerability is being tracked by BUG 1697784.
Description
On affected platforms running Arista EOS w ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Wed, 09 Sep 2026 00:38:11 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0148</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24535-security-advisory-0148</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24535-security-advisory-0148</guid>
			<description><![CDATA[
September 2, 2026



Revision
Date
Changes


1.0
September 02, 2026
Initial release


1.1
September 09, 2026
Updated Information



Update Type:
Informational
Scope of this Advisory:
 
On September 09, 2026 Arista published multiple Security Advisories. This update serves as a summary of those security advisories. Customers are encouraged to review each advisory that may impact their environment to assess the vulnerability conditions as well as mitigation and remediatio ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 31 Aug 2026 21:31:11 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0147</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24515-security-advisory-0147</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24515-security-advisory-0147</guid>
			<description><![CDATA[
Date: August 25, 2026



Revision
Date
Changes


1.0
August 25, 2026
Initial release


1.1
August 31, 2026
Updated the EOS versions affected and resolved



The CVE-IDs tracking these issues:
CVE-2026-59995CVSSv3.1 Base Score: 5.4 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L)Common Weakness Enumeration: CWE-23 Relative Path TraversalThis vulnerability is being tracked by BUG 1895932(EOS), MONAPP-52603(NDR)
CVE-2026-59996CVSSv3.1 Base Score: 5.4 (CVSS:3.1/AV:N/AC:L/PR:N/U ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 24 Aug 2026 22:59:46 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0146</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24500-security-advisory-0146</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24500-security-advisory-0146</guid>
			<description><![CDATA[
Date: August 19, 2026



Revision
Date
Changes


1.0
August 19, 2026
Initial release



Description
Arista Networks is providing this security update in response to the following list of gRPC-go security vulnerabilities posted by Google at https://github.com/advisories/GHSA-hrxh-6v49-42gf. Arista EOS-based products and WI-FI Access Point incorporate the affected gRPC-go framework.
Arista products are affected solely by the HTTP/2 Rapid Reset DOS Bypass vulnerability, wherein a ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 18 Aug 2026 22:44:24 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0145</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24365-security-advisory-0145</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24365-security-advisory-0145</guid>
			<description><![CDATA[
Date: July 27, 2026 



Revision
Date
Changes


1.0
July 27, 2026
Initial release


1.1
August 10, 2026
Added CSAF JSON file for download



 
Description: SQL injection in a flow metrics API method enabling server-side request forgery CVE: CVE-2026 -17191 CVSSv3.1 Base Score: 9.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L) CVSSv4.0 Base Score: 8.5 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:H/SI:L/SA:L/S:P) Common Weakness Enumeration: CWE-89 Improper Neutrali ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 27 Jul 2026 05:01:22 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0144</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24364-security-advisory-0144</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24364-security-advisory-0144</guid>
			<description><![CDATA[
Date: July 27, 2026



Revision
Date
Changes


1.0
July 27, 2026
Initial release


1.1
August 3, 2026
Updated Affected Platforms to include: VeloCloud Orchestrator Hosted


1.2
August 10, 2026
Added CSAF JSON file for download



 
The CVE-ID tracking this issue: CVE-2026-16812 CVSSv3.1 Base Score: 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 10.0 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:P) Common Weakness Enumerat ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Mon, 27 Jul 2026 04:59:42 +0000</pubDate>
		</item>
		<item>
			<title>Security Advisory 0143</title>
			<link>https://www.arista.com/en/support/advisories-notices/security-advisory/24112-security-advisory-0143</link>
			<guid isPermaLink="true">https://www.arista.com/en/support/advisories-notices/security-advisory/24112-security-advisory-0143</guid>
			<description><![CDATA[
Date: June 23, 2026



Revision
Date
Changes


1.0
Jun 23, 2026
Initial release


1.1
Jul 24, 2026
Clarification of certain details


1.2
August 10, 2026
Added CSAF JSON file for download



Description
All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with the Streaming Telemetry Agent (aka TerminAttr) enabled. This issue primarily affects customers using the Streaming Telemetry Agent to connect to CloudVision or a gNMI server.
 ...]]></description>
			<category>Security Advisories</category>
			<pubDate>Tue, 23 Jun 2026 00:37:30 +0000</pubDate>
		</item>
	</channel>
</rss>