CVE-2020-26569

In EVPN VxLAN setups in Arista EOS, specific malformed packets can lead to incorrect MAC to IP bindings and as a result packets can be incorrectly forwarded across VLAN boundaries. This can result in traffic being discarded on the receiving VLAN. This affects versions: 4.21.12M and below releases in the 4.21.x train; 4.22.7M and below releases in the 4.22.x train; 4.23.5M and below releases in the 4.23.x train; 4.24.2F and below releases in the 4.24.x train.

• https://www.arista.com/en/support/advisories-notices/security-advisories/11997-security-advisory-57Exploit, Vendor Advisory
• https://www.arista.com/en/support/advisories-notices/security-advisories/11997-security-advisory-57Exploit, Vendor Advisory

Published

Dec 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26561Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have …8.8
• CVE-2020-26563ObjectPlanet Opinio before 7.14 allows reflected XSS via the…6.1
• CVE-2020-26564ObjectPlanet Opinio before 7.15 allows XXE attacks via three…6.5
• CVE-2020-26565ObjectPlanet Opinio before 7.14 allows Expression Language I…7.5
• CVE-2020-26566A Denial of Service condition in Motion-Project Motion 3.2 t…7.5
• CVE-2020-26567An issue was discovered on D-Link DSR-250N before 3.17B devi…5.5
• CVE-2020-2657Vulnerability in the Oracle CRM Technical Foundation product…4.7
• CVE-2020-26570The Oberthur smart card software driver in OpenSC before 0.2…5.5
• CVE-2020-26571The gemsafe GPK smart card software driver in OpenSC before …5.5
• CVE-2020-26572The TCOS smart card software driver in OpenSC before 0.21.0-…5.5
• CVE-2020-26574Leostream Connection Broker 8.2.x is affected by stored XSS.…9.6
• CVE-2020-26575In Wireshark through 3.2.7, the Facebook Zero Protocol (aka …7.5