CVE-2026-121369 · Infrastructure
NO FIX YET
On Arista EOS switches under specific link configurations, an attacker with direct connectivity can drive CPU and memory use up sharply. The device becomes slow and may eventually reboot.
first public Nov 10, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Affected Arista EOS devices with the specific link configurations described in the advisory are exposed to an attacker on a directly connected segment. Network teams should look at Arista switches on segments where untrusted hosts can reach them directly. Devices without those link configurations, or with no reachable untrusted segment, are unlikely to be affected. The sources do not give the exact configurations or affected versions.
Not affected if default-config, no-untrusted-direct-connectivity
Who cares arista-eos, network-gear
Unknown from the sources.
No fix yet, per the sources.
On affected platforms running Arista EOS under specific link configurations an attacker with direct connectivity to the system may cause system CPU and memory utilization to increase considerably leading to slow responsiveness and eventually may cause the system to reboot.
This page as .md · .json · CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.