CVE-2026-102167

CVSS 9.0 (critical) · published 2026-10-06

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.

Weakness: CWE-121

Source: NVD CVE-2026-102167

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.