Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2026-75943

A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcem

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks EOS

Default version status: unaffected

  • 4.36.0 to ≤ 4.36.1Faffected
  • 4.35.0 to ≤ 4.35.5Maffected
  • 4.34.0 to ≤ 4.34.7.1Maffected
  • 0.0.0 to ≤ 4.33.9Maffected

References