CVE-2026-121295
Last modified
CVE-2026-121295 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted PDU could cause the kernel on the initiator device to crash, resulting in an unexpected device reboot.. EPSS estimates a 0.46% chance of exploitation in the next 30 days.
Description
On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device. This crafted PDU could cause the kernel on the initiator device to crash, resulting in an unexpected device reboot.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Arista Networks | EOS | >= 4.36.0F, <= 4.36.2F; >= 4.35.0F, <= 4.35.6M; >= 4.34.0F, <= 4.34.8M; >= 4.33.0F, <= 4.33.10M; >= 4.32.0F, < 4.33.0F; >= 1.0.0, < 4.32.0F |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-121295?
How severe is CVE-2026-121295?
How do I fix CVE-2026-121295?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-12129A vulnerability was identified in CodeAstro Human Resource M…3.5
- CVE-2026-121290On affected platforms running Arista EOS with Border Gateway…8.2
- CVE-2026-121291A crafted Error Report can leave EOS stuck believing that a …8.2
- CVE-2026-121292A malformed Error Report can cause EOS to read beyond packet…8.2
- CVE-2026-121293On affected EOS-based platforms, an attacker who controls a …4.4
- CVE-2026-121294On affected platforms running Arista EOS with a S-BFD reflec…5.3
- CVE-2026-1213All versions of askbot before and including 0.12.2 allow an …4.3
- CVE-2026-12130A security flaw has been discovered in CodeAstro Human Resou…3.5
- CVE-2026-12131A weakness has been identified in CodeAstro Human Resource M…6.3
- CVE-2026-12133The JoomSport – for Sports: Team & League, Football, Hockey …4.3
- CVE-2026-12134The JoomSport – for Sports: Team & League, Football, Hockey …4.3
- CVE-2026-121349Adobe Connect is affected by an Improper Limitation of a Pat…9.6
Are you affected by CVE-2026-121295?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST