CVE-2026-121293: Security Advisory 0210

Published Nov 10, 2026

Updated

On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol (BGP) peer can send a crafted BGP message over an established session with the Dynamic Path Selection (DPS) address family negotiated. This can cause the BGP process to terminate unexpectedly, resetting all BGP sessions and disrupting routing services until the process restarts.

Affected Software

1 affected component

Arista EOS

Event History

Nov 10, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed to this issue?

Exposure requires an EOS-based platform with an established BGP session to a peer controlled by an attacker and the Dynamic Path Selection (DPS) address family negotiated on that session.

What level of access does an attacker need?

The attacker must control a BGP peer and be able to send a crafted BGP message over an already established BGP session. The available information does not indicate exploitation through an unauthenticated or non-peer network connection.

What is the operational impact of successful exploitation?

Successful exploitation can terminate the BGP process unexpectedly. This resets all BGP sessions and disrupts routing services until the process restarts.

CVE-2026-121293: Security Advisory 0210

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed to this issue?

What level of access does an attacker need?

What is the operational impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed to this issue?

What level of access does an attacker need?

What is the operational impact of successful exploitation?