CVE-2026-120982
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
77/100
Published: 2026-11-10
Modified: 2026-11-13
First seen: 2026-11-10
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
X
AT:
None
VC:
None
VI:
None
VA:
High
Description
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who can establish a BGP peering session with an affected device and can send specially crafted BGP messages to cause repeated BGP session resets, enabling sustained disruption to network routing and traffic forwarding.
Weakness Classification (1)
Affected Software (10)
| Vendor | Product | Version |
|---|---|---|
| Arista Networks | EOS | 4.36.0F |
| Arista Networks | EOS | 4.35.0F |
| Arista Networks | EOS | 4.34.0F |
| Arista Networks | EOS | 4.33.0F |
| Arista Networks | EOS | 1.0.0 < 4.33.0F |
| Arista Networks | EOS | 4.36.0F |
| Arista Networks | EOS | 4.35.0F |
| Arista Networks | EOS | 4.34.0F |
| Arista Networks | EOS | 4.33.0F |
| Arista Networks | EOS | 1.0.0 < 4.33.0F |
References & Advisories (1)
Change History
| Field | Old Value | New Value | Detected |
|---|---|---|---|
| cvss_base | 7.5 | 8.7 | 2026-11-13T18:30 |
| cvss_base | 8.7 | 7.5 | 2026-11-13T18:00 |