CVE-2026-121295: Security Advisory 0223

Published Nov 10, 2026

Updated

On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted PDU could cause the kernel on the initiator device to crash, resulting in an unexpected device reboot.

Affected Software

1 affected component

Arista EOS

Event History

Nov 10, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which devices are exposed to this issue?

Affected Arista EOS platforms are exposed when they are configured as S-BFD peers and can receive S-BFD PDUs from an attacker.

What does an attacker need to do to trigger the impact?

An unauthenticated attacker needs to send a crafted S-BFD PDU to an initiator device. Successful exploitation can crash the initiator's kernel and cause an unexpected reboot.

CVE-2026-121295: Security Advisory 0223

Affected Software

Event History

Frequently Asked Questions

Which devices are exposed to this issue?

What does an attacker need to do to trigger the impact?

Company

Resources

Contact

Frequently Asked Questions

Which devices are exposed to this issue?

What does an attacker need to do to trigger the impact?