CVE-2026-120980: Security Advisory 0214

Published Nov 10, 2026

Updated

On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the PE routers can send a specially crafted BGP packet to cause the BGP agent to restart unexpectedly.

Affected Software

1 affected component

Arista EOS

Event History

Nov 10, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Affected platforms running Arista EOS with VPLS-BGP enabled are exposed. The attacker must be able to establish a BGP session with the PE routers.

What level of access does an attacker need to trigger the problem?

The attacker needs low privileges and must have an established BGP session with the PE routers. Exploitation consists of sending a specially crafted BGP packet over that session.

What is the expected impact of successful exploitation?

A successful attack causes the BGP agent to restart unexpectedly, resulting in an availability impact. No confidentiality or integrity impact is indicated.

CVE-2026-120980: Security Advisory 0214

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What level of access does an attacker need to trigger the problem?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What level of access does an attacker need to trigger the problem?

What is the expected impact of successful exploitation?