What is CVE-2026-120974?

CVE-2026-120974 is a medium-severity vulnerability in Arista Networks Eos, classified under Authentication Bypass by Capture-replay. CVSS score: 5.3/10. Published 2026-11-10.

How severe is CVE-2026-120974?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Arista Networks Eos

CVE-2026-120974

On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec replay window may not be applied as expected. As a result, IPsec anti-replay protection may be silently inactive even when it has been configured via an SA policy, contrary to the operator's expectation. This issue does not allow decryption of the affected IPsec traffic, but it may allow replay of previously valid protected traffic.

Published 2026-11-10.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Arista Networks Eos

Weakness classification (CWE)

CWE-294 — Authentication Bypass by Capture-replay

References

www.arista.com/en/support/advisories-notices/security-advisory/25041-security-a… (vendor-advisory)

Frequently asked questions

What is CVE-2026-120974?: CVE-2026-120974 is a medium-severity vulnerability in Arista Networks Eos, classified under Authentication Bypass by Capture-replay. CVSS score: 5.3/10. Published 2026-11-10.
How severe is CVE-2026-120974?: Medium severity. CVSS v3 base score is 5.3 out of 10.