Skip to content
OpenAdvisories
Low · 2.0 CVE-2026-120975 EUVD-2026-122906GHSA-3gjf-hwwx-cpxh

On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certific…

Published Nov 10, 2026 · Assigned by Arista

Description

On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.36.1F ≤4.36.1F —

Advisories 1

References