CVE-2026-102167

critical · 9

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.

CVSS

0.2%

EPSS (exploit prob.)

14th

EPSS percentile

2026-10-06

Published

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-121

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24813-security-advisory-0197

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-102167