CVE-2026-102168

On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with a crafted HTTP request. This results in a temporary denial of service until the service automatically restarts. Remote code execution is not possible.

• CWE-191

• https://www.arista.com/en/support/advisories-notices/security-advisory/24810-security-advisory-0194

Published

Oct 6, 2026

Last Modified

Oct 7, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-102161An unauthenticated attacker located on an adjacent private n…8.8
• CVE-2026-102162On affected Arista Wi-Fi access points with captive portal, …8.8
• CVE-2026-102163On affected Arista access points with Wireless Intrusion Pre…8.8
• CVE-2026-102164On affected Arista access points configured with VXLAN tunne…3.1
• CVE-2026-102165On affected Arista Wi-Fi access points, an unauthenticated a…7.5
• CVE-2026-102167On affected Arista Wi-Fi access points, a memory corruption …7.5
• CVE-2026-102169On affected Arista Wi-Fi access points with Captive Portal e…6.5
• CVE-2026-10217A flaw has been found in nextlevelbuilder GoClaw up to 3.11.…6.3
• CVE-2026-102173The Kirki – Freeform Page Builder, Website Builder & Customi…7.2
• CVE-2026-102174A Stack-based Buffer Overflow vulnerability in the iked IKE …8.8
• CVE-2026-102175A Heap-based Buffer Overflow vulnerability in the sdxd servi…9.8
• CVE-2026-102176A Buffer Copy without Checking Size of Input ('Classic Buffe…8.8