Arista Networks vulnerabilities
154 published CVEs name Arista Networks among the affected products; CISA lists 4 of them as exploited in the wild.
- Published CVEs
- 154
- Last 12 months
- 93
- Critical
- 21
- Known exploited
- 4
Critical 21High 66Medium 57Low 10Not scored 0
CVEs per yearBy the year they were published
- 20211
- 202211
- 202310
- 20243
- 202538
- 202691
Known exploitedNewest addition to KEV first
- CVE-2026-114625
Security Advisory 0199
Arista Networks · VeloCloud Orchestrator
ExploitedCritical9.4 - CVE-2026-93952
Security Advisory 0183
Arista Networks · VeloCloud Orchestrator (VCO) On-Prem
ExploitedCritical9.5 - CVE-2026-16812
VeloCloud Orchestrator OS Command Injection
Arista Networks · VeloCloud Orchestrator On-Prem
ExploitedCritical10.0 - CVE-2026-7473
Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
Arista Networks · EOS
ExploitedMedium6.9
Newest CVEs
- CVE-2026-114625
Security Advisory 0199
Arista Networks · VeloCloud Orchestrator
ExploitedCritical9.4 - CVE-2026-102165
Security Advisory 0198
Arista Networks · Wi-Fi Access Points
High7.7 - CVE-2026-102167
Security Advisory 0197
Arista Networks · Wi-Fi Access Points
Critical9.0 - CVE-2026-102164
Security Advisory 0196
Arista Networks · Wi-Fi Access Points
Low2.3 - CVE-2026-102163
Security Advisory 0195
Arista Networks · Wi-Fi Access Points
High8.7 - CVE-2026-102169
Security Advisory 0194
Arista Networks · Wi-Fi Access Points
High7.1 - CVE-2026-102168
Security Advisory 0194
Arista Networks · Wi-Fi Access Points
High7.1 - CVE-2026-102162
Security Advisory 0193
Arista Networks · Wi-Fi Access Points
Critical9.4 - CVE-2026-101157
Security Advisory 0192
Arista Networks · CloudVision CUE
Critical9.3 - CVE-2026-101156
Security Advisory 0192
Arista Networks · CloudVision CUE
Medium6.2
Products with the most CVEs
Most common weaknesses
- CWE-78 OS command injection9
- CWE-284 Improper access control8
- CWE-532 Sensitive information in a log file7
- CWE-20 Improper input validation6
- CWE-863 Incorrect authorization6
- CWE-125 Out-of-bounds read5
- CWE-1284 5
- CWE-287 Improper authentication5
- CWE-306 Missing authentication for a critical function5
- CWE-79 Cross-site scripting (XSS)5