Known vulnerabilities in Arista Extensible Operating System (EOS)
Vendor:
Arista Networks
Software:
Arista Extensible Operating System (EOS)
Software CPE:
cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*
Website:
https://www.arista.com/en/
Total vulnerabilities:
64
Public exploits:
6
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.36.2F
4.32.11M
4.33.8M
4.34.6M
4.35.4M
4.33.9M
4.34.8M
4.35.6M
4.36.1F
4.31.10M
4.32.8M
4.33.6M
4.34.4M
4.35.0F
4.32.9M
4.34.5M
4.35.3F
4.31.9M
4.32.7M
4.33.5M
4.34.2F
4.31.8M
4.32.6M
4.33.4M
4.34.1F
4.30.10
4.31.7
4.32.5
4.33.3F
4.33.2.1F
4.33.3M
4.30.0M
4.27.10M
4.28.7M
4.25.2F
4.24.5M
4.23.7M
4.22.9M
4.21.14M
4.20.14M
4.21.2.4F
4.22.0.2F
4.23.0F
4.24.0.FX-KC
4.21.11M
4.22.5M
4.23.4M
4.24.1F
4.23.2F
4.22.4M
4.21.9M
4.17
4.21.2.7F
4.21.6.4F
4.23.6M
4.22.8M
4.24.2.2F
4.22.7.1M
4.21.13M
4.21.12M
4.24.2F
4.18.10M
4.19.10M
4.20.9M
4.21.1F
4.21.2.3F
4.22.7M
4.23.5M
4.24.3M
4.25.0F
4.26.2
4.25.5
4.21.15M
4.22.12M
4.23.9M
4.24.7M
4.25.4.1M
4.25.5M
4.26.2F
4.23.10
4.24.8
4.25.6
4.26.3
4.25.7M
4.27.2F
4.27.1F
4.26.4M
4.26.10M
4.27.9M
4.28.0
4.25.1F
4.26.0F
4.27.0F
4.28.0F
4.29.0F
4.30.0F
4.29.2F
4.28.6M
4.22.13M
4.23.13M
4.26.8M
4.28.3M
4.29
4.19.12.1M
4.18.11M
4.23.12
4.25.9
4.27.4
4.27.2
4.26.6
4.25.8
4.24.10
4.24.11M
4.25.10M
4.26.9M
4.27.7M
4.28.4M
4.29.7M
4.30.5M
4.32.0F
4.31.2F
4.30.6M
4.28.11M
4.29.8M
4.30.7M
4.31.3M
4.32.1F
4.28.12M
4.29.9M
4.32.2F
4.30.8M
4.31.5M
4.33.1
4.33.0M
4.28.13
4.29.10
4.30.9
4.31.6
4.32.4
4.33.2
4.31.6M
4.32.4M
4.33.1F
4.29.10M
4.30.9M
4.32.3M
4.33.0F
4.33.2F
4.32.5M
4.31.7M
4.30.10M
Vulnerabilities (64)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU144260 - Resource exhaustion |
CWE-400 | Medium | 4.33.9M, 4.34.8M, 4.35.6M, 4.36.2F | 19.08.2026 |
SB2026081946 SB2026082143 SB2026082144 and 1 more |
||
| #VU135099 - Authentication Bypass Using an Alternate Path or Channel CVE-2026-12546 |
CWE-288 | Low | 4.32.11M, 4.33.8M, 4.34.6M, 4.35.4M, 4.36.1F | 24.06.2026 |
SB2026062433 |
||
| #VU135093 - Cleartext Storage of Sensitive Information CVE-2026-11704 |
CWE-312 | Low | 4.33.9M, 4.34.8M, 4.35.6M, 4.36.1F | 24.06.2026 |
SB2026062432 |
||
| #VU135094 - Execution with Unnecessary Privileges CVE-2026-11705 |
CWE-250 | Medium | 4.33.9M, 4.34.8M, 4.35.6M, 4.36.1F | 24.06.2026 |
SB2026062432 |
||
| #VU135095 - Incorrect Default Permissions CVE-2026-52895 |
CWE-276 | Low | 4.33.9M, 4.34.8M, 4.35.6M, 4.36.1F | 24.06.2026 |
SB2026062432 |
||
| #VU135096 - Improper Certificate Validation CVE-2026-52896 |
CWE-295 | Medium | 4.33.9M, 4.34.8M, 4.35.6M, 4.36.1F | 24.06.2026 |
SB2026062432 |
||
| #VU135097 - Improper Privilege Management CVE-2026-52897 |
CWE-269 | Low | 4.33.9M, 4.34.8M, 4.35.6M, 4.36.1F | 24.06.2026 |
SB2026062432 |
||
| #VU135098 - Exposure of resource to wrong sphere CVE-2026-52898 |
CWE-668 | Low | 4.33.9M, 4.34.8M, 4.35.6M, 4.36.1F | 24.06.2026 |
SB2026062432 |
||
| #VU134147 - Incomplete Comparison with Missing Factors CVE-2026-7473 |
CWE-1023 | High | - | 09.06.2026 |
SB2026060970 |
||
| #VU126174 - Buffer Access with Incorrect Length Value CVE-2025-7048 |
CWE-805 | Medium | 4.31.10M, 4.32.8M, 4.33.6M, 4.34.4M, 4.35.0F | 15.04.2026 |
SB20260415108 |
||
| #VU126173 - Resource exhaustion CVE-2025-8872 |
CWE-400 | Medium | 4.31.9M, 4.32.8M, 4.33.5M, 4.34.2F | 15.04.2026 |
SB20260415107 |
||
| #VU126171 - Improper Validation of Syntactic Correctness of Input CVE-2025-8873 |
CWE-1286 | Medium | 4.32.7M, 4.33.5M | 15.04.2026 |
SB20260415106 |
||
| #VU126170 - Operation on a Resource after Expiration or Release CVE-2026-2379 |
CWE-672 | Medium | 4.31.10M, 4.32.8M, 4.33.6M, 4.34.4M, 4.35.0F | 15.04.2026 |
SB20260415105 |
||
| #VU126167 - Improper Privilege Management CVE-2025-5088 |
CWE-269 | Medium | 4.31.9M, 4.32.7M, 4.33.5M, 4.34.2F | 15.04.2026 |
SB20260415103 |
||
| #VU126168 - Improper input validation CVE-2025-5089 |
CWE-20 | Medium | 4.31.9M, 4.32.7M, 4.33.5M, 4.34.2F | 15.04.2026 |
SB20260415103 |
||
| #VU126169 - Improper input validation CVE-2025-5090 |
CWE-20 | Medium | 4.32.7M, 4.33.5M, 4.34.2F | 15.04.2026 |
SB20260415103 |
||
| #VU118106 - UNIX Symbolic Link (Symlink) Following CVE-2025-52565 |
CWE-61 | Low | 4.32.9M, 4.34.5M, 4.35.3F | 05.11.2025 |
SB2025110519 SB2025110530 SB2025110545 and 38 more |
||
| #VU118105 - UNIX Symbolic Link (Symlink) Following CVE-2025-52881 |
CWE-61 | Low | 4.32.9M, 4.34.5M, 4.35.3F | 05.11.2025 |
SB2025110519 SB2025110530 SB2025110545 and 62 more |
||
| #VU118104 - UNIX Symbolic Link (Symlink) Following CVE-2025-31133 |
CWE-61 | Low | 4.32.9M, 4.34.5M, 4.35.3F | 05.11.2025 |
SB2025110519 SB2025110530 SB2025110545 and 34 more |
||
| #VU113162 - Information Exposure Through Log Files CVE-2025-3456 |
CWE-532 | Low | 4.31.8M, 4.32.6M, 4.33.4M, 4.34.1F | 22.07.2025 |
SB2025072258 |
Showing elements 1 - 20 out of 64