Skip to content
OpenAdvisories
High · 7.5 CVE-2026-120982 EUVD-2026-122805GHSA-22p8-q5w7-c595

Security Advisory 0207

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Arista

Description

On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who can establish a BGP peering session with an affected device and can send specially crafted BGP messages to cause repeated BGP session resets, enabling sustained disruption to network routing and traffic forwarding.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.36.0F – ≤ 4.36.2F, 4.35.0F – ≤ 4.35.6M, 4.34.0F – ≤ 4.34.8M, 4.33.0F – ≤ 4.33.10M, 1.0.0 – < 4.33.0F 4.33.0F

Advisories 1

References