CVE-2026-101149 MEDIUM 5.1 Cloudvision Portal — Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to… 2026-10-06 CVE-2026-101150 MEDIUM 5.1 Cloudvision Portal — Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to… 2026-10-06 CVE-2026-101151 MEDIUM 5.3 Cloudvision Portal — Insufficient validation of request in login flow could allow a remote, unauthenticated attacker to craft a URL… 2026-10-06 CVE-2026-101152 HIGH 7.6 Cloudvision Portal — Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker … 2026-10-06 CVE-2026-101153 HIGH 7.2 Cloudvision Portal — On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability… 2026-10-06 CVE-2026-101154 HIGH 8.6 Cloudvision Portal — An authenticated remote attacker with specific permissions can read or write files on the platform filesystem … 2026-10-06 CVE-2026-101155 HIGH 8.6 Cloudvision Portal — An authenticated remote attacker with specific permissions can read or write files on the platform filesystem … 2026-10-06 CVE-2026-101156 MEDIUM 6.2 Cloudvision Cue — A stored cross-site scripting (XSS) vulnerability may allow an authenticated, high-privilege administrator to … 2026-10-06 CVE-2026-101157 CRITICAL 9.3 Cloudvision Cue — A stored cross-site scripting (XSS) vulnerability may allow an unauthenticated attacker with adjacent-network … 2026-10-06 CVE-2026-101158 CRITICAL 9.3 Cloudvision Portal — A missing input validation vulnerability in the Fileserver upload API allows an authenticated attacker with fi… 2026-10-06 CVE-2026-102155 HIGH 7.1 Cloudvision Cue — An XML External Entity (XXE) injection vulnerability in the WiFi-server Spectralight application allows any au… 2026-10-06 CVE-2026-102156 MEDIUM 6.9 Cloudvision Cue — Improper neutralization of Lightweight Directory Access Protocol (LDAP) authentication input may allow an unau… 2026-10-06 CVE-2026-102157 MEDIUM 6.8 Cloudvision Cue — An insecure direct object reference (IDOR) vulnerability in a CloudVision CUE file-serving interface may allow… 2026-10-06 CVE-2026-102158 HIGH 7.1 Cloudvision Cue — Improper validation of selected CloudVision CUE application programming interface (API) request parameters may… 2026-10-06 CVE-2026-102159 CRITICAL 9.3 Cloudvision Cue — An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functiona… 2026-10-06 CVE-2026-102160 HIGH 8.6 Cloudvision Cue — An operating system (OS) command injection vulnerability in CloudVision CUE backup management may allow an aut… 2026-10-06 CVE-2026-102161 HIGH 8.7 Cloudvision Cue — An unauthenticated attacker located on an adjacent private network (or any attacker routed through a reverse p… 2026-10-06 CVE-2026-102162 CRITICAL 9.4 Wi Fi Access Points — On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SS… 2026-10-06 CVE-2026-102163 HIGH 8.7 Wi Fi Access Points — On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated a… 2026-10-06 CVE-2026-102164 LOW 2.3 Wi Fi Access Points — On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration uniqu… 2026-10-06 CVE-2026-102165 HIGH 7.7 Wi Fi Access Points — On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service… 2026-10-06 CVE-2026-102167 CRITICAL 9 Wi Fi Access Points — On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplin… 2026-10-06 CVE-2026-102168 HIGH 7.1 Wi Fi Access Points — On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connect… 2026-10-06 CVE-2026-102169 HIGH 7.1 Wi Fi Access Points — On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connect… 2026-10-06 CVE-2026-93952 CRITICAL 9.5 Velocloud Orchestrator (Vco) On Prem — VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to acce…● exploited 2026-09-22 CVE-2026-19640 LOW 2.3 Eos — On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Manageme… 2026-09-16 CVE-2026-2380 MEDIUM 5.1 Eos — On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETC… 2026-09-16 CVE-2026-73435 HIGH 7 Eos — On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specia… 2026-09-16 CVE-2026-73436 MEDIUM 6 Eos — On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafte… 2026-09-16 CVE-2026-73438 HIGH 7 Eos — On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, an unaut… 2026-09-16 CVE-2026-73439 HIGH 7.7 Eos — On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system,… 2026-09-16 CVE-2026-73440 LOW 2.3 Eos — On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 loc… 2026-09-16 CVE-2026-73442 LOW 2.1 Eos — On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials ar… 2026-09-16 CVE-2026-73443 MEDIUM 5.3 Eos — On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attac… 2026-09-16 CVE-2026-73445 MEDIUM 6.9 Eos — On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotat… 2026-09-16 CVE-2026-73447 CRITICAL 9.4 Eos — A privileged attacker can exploit certain operation to execute arbitrary commands with root privileges, leadin… 2026-09-16 CVE-2026-73450 HIGH 7 Eos — On affected platforms running Arista EOS with MLAG Dual Primary Detection configured, an unauthenticated attac… 2026-09-16 CVE-2026-73453 CRITICAL 9.5 Eos — An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve a… 2026-09-16 CVE-2026-73454 HIGH 8.6 Eos — On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a… 2026-09-16 CVE-2026-73455 HIGH 8.9 Eos — On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specia… 2026-09-16 CVE-2026-73456 CRITICAL 9.2 Eos — Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interfa… 2026-09-16 CVE-2026-73457 MEDIUM 6 Eos — Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interfa… 2026-09-16 CVE-2026-73461 CRITICAL 9.4 Eos — On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authen… 2026-09-16 CVE-2026-73462 HIGH 7.1 Eos — On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (e… 2026-09-16 CVE-2026-73463 MEDIUM 6 Eos — On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are … 2026-09-16 CVE-2026-73464 HIGH 8.7 Eos — On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially cr… 2026-09-16 CVE-2026-73468 HIGH 7.1 Eos — A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces… 2026-09-16 CVE-2026-73469 MEDIUM 6.9 Eos — When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration… 2026-09-16 CVE-2026-77190 MEDIUM 6 Eos — On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch an… 2026-09-16 CVE-2026-86106 HIGH 8.7 Velocloud Edge — An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer func… 2026-09-16 CVE-2026-86107 HIGH 8.2 Velocloud — The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragme… 2026-09-16 CVE-2026-86108 HIGH 7.5 Velocloud Edge — Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workfl… 2026-09-16 CVE-2026-86109 HIGH 7.5 Velocloud Edge — The VeloCloud Edge software update workflow may accept update bundles without properly validating their signat… 2026-09-16 CVE-2026-19641 MEDIUM 6.9 Eos — On affected platforms running Arista EOS with password authentication configured, a specially crafted password… 2026-09-15 CVE-2026-19655 HIGH 7.1 Eos — On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping config… 2026-09-15 CVE-2026-73437 MEDIUM 6.5 Eos — On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an … 2026-09-15 CVE-2026-73444 MEDIUM 5.3 Eos — On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configure… 2026-09-15 CVE-2026-73446 HIGH 7 Eos — On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated at… 2026-09-15 CVE-2026-73451 MEDIUM 6.3 Eos — On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on S… 2026-09-15 CVE-2026-73458 CRITICAL 9.2 Eos — On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions … 2026-09-15 CVE-2026-73459 HIGH 7 Eos — On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a s… 2026-09-15 CVE-2026-73460 HIGH 7 Eos — On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who … 2026-09-15 CVE-2026-73465 MEDIUM 6 Eos — On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in… 2026-09-15 CVE-2026-73466 MEDIUM 6 Eos — On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear … 2026-09-15 CVE-2026-73467 MEDIUM 6 Eos — On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured … 2026-09-15 CVE-2026-73449 MEDIUM 5.9 Eos — On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature con… 2026-09-14 CVE-2026-75943 LOW 2.1 Eos — A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either v… 2026-09-14 CVE-2026-75944 MEDIUM 5.6 Eos — A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. … 2026-09-14 CVE-2026-75945 LOW 2.1 Eos — A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command … 2026-09-14 CVE-2026-77191 LOW 2.1 Eos — An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send u… 2026-09-14