CVE-2026-120980

CVSS 6.0 (medium) · published 2026-11-10

On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the PE routers can send a specially crafted BGP packet to cause the BGP agent to restart unexpectedly.

Weakness: CWE-617

Source: NVD CVE-2026-120980

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/25036-security-advisory-0214

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.