Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-120981 EUVD-2026-122804GHSA-2c52-hf3f-p2x2

Security Advisory 0214

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Arista

Description

On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the PE router can affect the route advertisements of VPLS pseudowires, causing a churn of the established routes with other legitimate BGP peers.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.33.0F – ≤ 4.33.10M, 4.34.0F – ≤ 4.34.8M, 4.35.0F – ≤ 4.35.6M, 4.36.0F – ≤ 4.36.2F —

Advisories 1

References