CVE-2026-121286 · Infrastructure
NO FIX YET
On Arista EOS devices running the multi-agent routing model with the BGP SR-TE address family configured, a BGP peer can send crafted packets that restart the BGP process. The restart disrupts every BGP session on the device.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Only Arista EOS devices that run the multi-agent routing model and have the BGP Segment Routing Traffic Engineering address family configured are exposed. The attacker must be a BGP peer that can send packets to the device. Networks without that configuration can skip it.
Not affected if default-config, no-bgp-sr-te, single-agent-routing
Who cares arista-eos, bgp, network-routing
show version.No fix yet, per the sources.
On affected platforms running Arista EOS in multi-agent routing model with BGP Segment Routing Traffic Engineering (SR-TE) address family configured, a BGP peer can send crafted BGP packets to cause the BGP process to restart, disrupting all BGP sessions on the device.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.