CVE-2026-121286: Security Advisory 0213

Published Nov 10, 2026

Updated

On affected platforms running Arista EOS in multi-agent routing model with BGP Segment Routing Traffic Engineering (SR-TE) address family configured, a BGP peer can send crafted BGP packets to cause the BGP process to restart, disrupting all BGP sessions on the device.

Affected Software

1 affected component

Arista EOS

Event History

Nov 10, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Affected Arista EOS platforms are exposed when they use the multi-agent routing model and have the BGP SR-TE address family configured. Deployments without that stated configuration are not identified as affected by the advisory data.

What does an attacker need to exploit the issue?

An attacker needs to be a BGP peer capable of sending crafted BGP packets to the affected device. The available data does not indicate that user interaction is required.

What is the operational impact of successful exploitation?

Successful exploitation restarts the BGP process and disrupts all BGP sessions on the device. The supplied impact vector indicates availability impact, with no stated confidentiality or integrity impact.

CVE-2026-121286: Security Advisory 0213

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit the issue?

What is the operational impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What does an attacker need to exploit the issue?

What is the operational impact of successful exploitation?