Vulnerabilities

On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could send a crafted S-BFD Protocol…

On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could send a crafted S-BFD Protocol Data Unit (PDU) that might cause the device to temporarily cease reflecting S-BFD packets, potentially resulting in S-BFD session timeouts.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Arista Networks

Product

EOS

CVSS v3.1

5.3 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weakness

CWE-1284

Exposure class

Edge / VPN / firewall

NVD status

Received

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-121294 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 34
   CVE NVD 25h ago

   On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted S-BFD PDU to an initiator device.

   CVSS 8.6 CVE-2026-121295 Arista Networks