CVE-2026-75943 Security feature bypass in EOS
Authenticated users can bypass ACL enforcement during brief removal windows, allowing unauthorized traffic passage on Arista EOS devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-75943?
CVE-2026-75943 is a low-severity vulnerability in Arista Networks EOS, published on 14 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.
Weakness: CWE-459
Which versions are affected by CVE-2026-75943?
How do I fix CVE-2026-75943?
No fix has been published for CVE-2026-75943 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-75943 being exploited?
There is no known exploitation of CVE-2026-75943 in the wild and no public exploit code.
Sources
Also known as GHSA-w63v-3gq5-cj26.