CVE-2026-120982: Security Advisory 0207

Published Nov 10, 2026

Updated

On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who can establish a BGP peering session with an affected device and can send specially crafted BGP messages to cause repeated BGP session resets, enabling sustained disruption to network routing and traffic forwarding.

Affected Software

1 affected component

Arista EOS

Event History

Nov 10, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Does exploitation require credentials or prior access to the device?

No authentication or privileges are required. However, the attacker must be able to establish a BGP peering session with the affected device.

What access must an attacker have to trigger the issue?

The attacker needs network reachability sufficient to form a BGP peering session and send specially crafted BGP messages. Devices without BGP configured are not identified as affected by the provided advisory details.

What is the likely operational impact?

Repeated BGP session resets can sustain disruption to network routing and traffic forwarding. The provided severity vector indicates availability impact, with no stated confidentiality or integrity impact.

CVE-2026-120982: Security Advisory 0207

Affected Software

Event History

Frequently Asked Questions

Does exploitation require credentials or prior access to the device?

What access must an attacker have to trigger the issue?

What is the likely operational impact?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require credentials or prior access to the device?

What access must an attacker have to trigger the issue?

What is the likely operational impact?