CVE-2026-120974 | Arista EOS up to 4.36.1F IPsec AutoVPN Feature authentication replay

November 10, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Arista EOS up to 4.36.1F. The impacted element is an unknown function of the component IPsec AutoVPN Feature. This manipulation causes authentication bypass by capture-replay.

This vulnerability is tracked as CVE-2026-120974. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More