ZDI-CAN-29637 HIGH 7.2 Upcoming Mar 20, 2026

Arista

Arista is a well-known networking equipment vendor that produces switches, routers, and cloud networking solutions. This high-severity vulnerability (CVSS 7.2) can be exploited remotely by an authenticated high-privileged attacker with no user interaction required, allowing complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patches expected by July 2026 and restrict administrative access to Arista devices in the interim.

Advisory Details
Researcher Andy Niu of TrendAI Research
Reported March 20, 2026
Deadline July 18, 2026 93d
CVSS Vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy