ARISTA EOS · CVE-2026-120975 · Infrastructure
NO FIX YET
On Arista EOS switches with automatic certificate management and automatic CA certificate retrieval enabled, a malicious packet can crash the AutoCertMgmt process. Managed X.509 certificates then stop renewing and may expire, breaking TLS-dependent services.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only Arista EOS devices that run automatic certificate management with automatic CA certificate retrieval enabled are exposed. Switches that manage certificates manually, or that do not use this feature, can skip it. The sources do not list the exact affected EOS versions.
Not affected if feature-disabled, manual-certificate-management
Who cares arista-eos, network-gear, tls-certificates
No fix yet, per the sources.
On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.
This page as .md · .json · CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.