EUVD-2026-81008
GHSA-8w53-fqwp-95j2
Severity by source
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Authenticated user (PR:L) reading remotely accessible accounting logs (AV:N); AC:H reflects the conditional 'certain circumstances' trigger; credential leak is confidentiality-only (C:H, I/A:N).
Primary rating from Vendor (Arista).
CVSS VectorVendor: Arista
Lifecycle Timeline
3DescriptionCVE.org
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users.
AnalysisAI
Clear-text logging in Arista EOS with the gRPC Network Packet Sampling Interface (gNPSI) enabled can expose gNPSI client credentials to authenticated users who can read local or remote accounting logs. Affected devices are those running EOS with the non-default, opt-in gNPSI feature configured; exploitation requires an already-authenticated user with log access and specific conditions under which the credentials are written in clear text. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the gRPC Network Packet Sampling Interface (gNPSI) feature to be enabled on the Arista EOS device - a non-default, opt-in configuration. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a moderate-severity information-disclosure issue (vendor CVSS 4.0 6.0), not a high-priority remote-code-execution or unauthenticated-access flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch is identified in the provided data; consult the Arista advisory at https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158 for fixed EOS releases and apply the recommended upgrade when available. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of
Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execut
Remote code execution in OpenSSH's sshd server (regression of CVE-2006-5051) allows unauthenticated remote attackers to
Tunnel decapsulation logic in Arista EOS fails to verify the encapsulation protocol type, allowing any tunneled packet d
Command injection in Arista EOS-based products lets an authenticated user of the gRPC Network Security Interface (gNSI)
The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows
On affected modular platforms running Arista EOS equipped with both redundant supervisor modules and having the redundan
Heap-based buffer overflow in the PCNET controller in QEMU allows remote attackers to execute arbitrary code by sending
Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.
On affected platforms running Arista EOS with mirroring to multiple destinations configured, an internal system error ma
On affected platforms running Arista EOS with SNMP configured, a specially crafted packet can cause a memory leak in the
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today