Skip to content
CVE PROGRAM SOURCE RECORD2.1 Low

CVE-2026-77191

All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplicant policy enforcement. An authenticated supplicant on an

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

An authenticated supplicant on an adjacent network may bypass intended network authorization policy and send unrestricted traffic during a brief window (milliseconds to seconds) between the completion of the authentication phase and the full enforcement of its assigned ACL.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks EOS

Default version status: unaffected

  • 4.35.0 to ≤ 4.35.0.3Faffected
  • 4.34.0 to ≤ 4.34.5Maffected
  • 0.0.0 to ≤ 4.33.7.1Maffected

References