CVE-2026-120975: Security Advisory 0205

Published Nov 10, 2026

Updated

On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.

Affected Software

1 affected component

Arista EOS

Event History

Nov 10, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Affected platforms running Arista EOS are exposed only when automatic certificate management is configured and automatic CA certificate retrieval is enabled.

What does an attacker need to do to trigger the problem?

An attacker must cause a malicious packet to be processed. Exploitation has high attack complexity, requires high privileges, and requires user interaction according to the supplied vector.

What is the operational impact if exploitation succeeds?

The AutoCertMgmt process can terminate unexpectedly, preventing managed X.509 certificates from being renewed automatically. Certificates may eventually expire and disrupt services that depend on TLS.

CVE-2026-120975: Security Advisory 0205

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to trigger the problem?

What is the operational impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to do to trigger the problem?

What is the operational impact if exploitation succeeds?