[ CVE-2026-102167 · Published 6 Oct 2026 ]
Vulnerability in Arista Networks Wi-Fi Access Points
CVSS 7.5
EPSS <1%1 agency advisoryNo fix listed yet
[ Description ]Official description
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-3775
Arista WiFi Access Point: Multiple vulnerabilities Translated from German