CVE-2026-120981: Security Advisory 0214

Published Nov 10, 2026

Updated

On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the PE router can affect the route advertisements of VPLS pseudowires, causing a churn of the established routes with other legitimate BGP peers.

Affected Software

1 affected component

Arista EOS

Event History

Nov 10, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Affected platforms running Arista EOS are exposed when VPLS-BGP is enabled and a BGP session can be established with the PE router.

What access does an attacker need?

The attacker must have already established a BGP session with the PE router. The provided information does not indicate that unauthenticated or non-BGP network access alone is sufficient.

What is the operational impact of exploitation?

An attacker can affect VPLS pseudowire route advertisements, causing established routes to churn with other legitimate BGP peers. The stated impact is on availability; no confidentiality or integrity impact is listed.

CVE-2026-120981: Security Advisory 0214

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What access does an attacker need?

What is the operational impact of exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What access does an attacker need?

What is the operational impact of exploitation?