Skip to content
OpenAdvisories
Low · 2.6 CVE-2026-77191 EUVD-2026-78203GHSA-x5j2-9m8v-88hr

All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplicant policy enforcement. An authenticated supplicant on an

Published Sep 14, 2026 · Updated Sep 15, 2026 · Assigned by Arista

Vendor: Arista Networks Product: EOS Category: Network devices

Description

An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send unrestricted traffic during a brief window (milliseconds to seconds) between the completion of the authentication phase and the full enforcement of its assigned ACL.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.35.0 – ≤ 4.35.0.3F, 4.34.0 – ≤ 4.34.5M, 0.0.0 – ≤ 4.33.7.1M —

Advisories 1

References