What is CVE-2026-75943?

CVE-2026-75943 is a low-severity vulnerability in Arista Networks Eos, classified under Incomplete Cleanup. CVSS score: 2.6/10. Published 2026-09-14.

How severe is CVE-2026-75943?

Low severity. CVSS v3 base score is 2.6 out of 10.

Vulnerability in Arista Networks Eos

CVE-2026-75943

A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.

CVSS v3 metric

CVSS v3 base score 2.6 (Low). Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Arista Networks Eos

Weakness classification (CWE)

CWE-459 — Incomplete Cleanup

References

psirt@arista.com

Frequently asked questions

What is CVE-2026-75943?: CVE-2026-75943 is a low-severity vulnerability in Arista Networks Eos, classified under Incomplete Cleanup. CVSS score: 2.6/10. Published 2026-09-14.
How severe is CVE-2026-75943?: Low severity. CVSS v3 base score is 2.6 out of 10.