CVE-2026-121290
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
77/100
Published: 2026-11-10
Modified: 2026-11-13
First seen: 2026-11-10
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
X
AT:
Present
VC:
None
VI:
Low
VA:
High
Description
On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its default value disables default protective Access Control List (ACL) rules against unexpected BGP peering attempts.
Weakness Classification (1)
Affected Software (12)
| Vendor | Product | Version |
|---|---|---|
| Arista Networks | EOS | 4.36.0F |
| Arista Networks | EOS | 4.35.0F |
| Arista Networks | EOS | 4.34.0F |
| Arista Networks | EOS | 4.33.0F |
| Arista Networks | EOS | 4.32.0F < 4.33.0F |
| Arista Networks | EOS | 1.0.0 < 4.32.0F |
| Arista Networks | EOS | 4.36.0F |
| Arista Networks | EOS | 4.35.0F |
| Arista Networks | EOS | 4.34.0F |
| Arista Networks | EOS | 4.33.0F |
| Arista Networks | EOS | 4.32.0F < 4.33.0F |
| Arista Networks | EOS | 1.0.0 < 4.32.0F |
References & Advisories (1)
Change History
| Field | Old Value | New Value | Detected |
|---|---|---|---|
| cvss_base | 8.2 | 8.3 | 2026-11-13T18:30 |
| cvss_base | 8.3 | 8.2 | 2026-11-13T18:00 |