Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-121286 EUVD-2026-122807GHSA-3cjg-48fh-7pr5

Security Advisory 0213

Published Nov 10, 2026 · Updated Nov 13, 2026 · Assigned by Arista

Description

On affected platforms running Arista EOS in multi-agent routing model with BGP Segment Routing Traffic Engineering (SR-TE) address family configured, a BGP peer can send crafted BGP packets to cause the BGP process to restart, disrupting all BGP sessions on the device.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.36.0F – ≤ 4.36.2F, 4.35.0F – ≤ 4.35.6M, 4.34.0F – ≤ 4.34.8M, 4.33.0F – ≤ 4.33.10M, 4.32.0F – < 4.33.0F, 4.22.1F – < 4.32.0F 4.33.0F

Advisories 1

References