Skip to content
OpenAdvisories
Low · 2.6 CVE-2026-75943 EUVD-2026-78211GHSA-w63v-3gq5-cj26

A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcem

Published Sep 14, 2026 · Updated Sep 15, 2026 · Assigned by Arista

Description

A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.36.0 – ≤ 4.36.1F, 4.35.0 – ≤ 4.35.5M, 4.34.0 – ≤ 4.34.7.1M, 0.0.0 – ≤ 4.33.9M —

Advisories 1

References