CVE-2026-121295 · Infrastructure
NO FIX YET
Per the CVE text, on Arista EOS devices configured as S-BFD peers an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device, crashing its kernel and rebooting it. Affected and fixed EOS versions are not yet confirmed from Arista's advisory.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Affected Arista EOS devices that run S-BFD (Seamless Bidirectional Forwarding Detection) as peers can be crashed by a crafted S-BFD PDU sent by an unauthenticated attacker. Networks not running Arista EOS with S-BFD peering are not affected by this description. unknown for exact affected versions.
Not affected if no-s-bfd-configured, no-s-bfd-peering
Who cares arista-eos, network-gear, s-bfd
No fix yet, per the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted PDU could cause the kernel on the initiator device to crash, resulting in an unexpected device reboot.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.