ZDI-CAN-29637
HIGH 7.2
Upcoming
Mar 20, 2026
Arista
Arista is a well-known networking equipment vendor that produces switches, routers, and cloud networking solutions. This high-severity vulnerability (CVSS 7.2) can be exploited remotely by an authenticated high-privileged attacker with no user interaction required, allowing complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patches expected by July 2026 and restrict administrative access to Arista devices in the interim.
Advisory Details
Researcher
Andy Niu of TrendAI Research
Reported
March 20, 2026
Deadline
July 18, 2026
93d
CVSS Vector
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H