CVE-2026-75943

A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.

Scoring

Severity

LOW

CVSS base score

2.6

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

EPSS probability

0.13%

CWE

CWE-459

Published

2026-09-14

Last modified

2026-09-15

Affected products

• Arista Networks EOS
• Arista Networks EOS
• Arista Networks EOS
• Arista Networks EOS

Weakness type

• CWE-459

Related vulnerabilities

• CVE-2025-31650 — Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
• CVE-2023-36468 — Upgrading doesn't prevent exploiting vulnerable XWiki documents
• CVE-2026-28268 — Vikunja Vulnerable to Account Takeover via Password Reset Token Reuse
• CVE-2025-59781 — BIG-IP DNS cache vulnerability
• CVE-2025-21609 — SiYuan has an arbitrary file deletion vulnerability
• CVE-2022-39368 — Californium Failing DTLS handshakes causes Data Loss due to throttling blocking processing of records
• CVE-2021-36205 — Metasys session token
• CVE-2025-43711 — Tunnelblick 3.5beta06 before 7.0, when incompletely uninstalled, allows attackers to execute arbitrary code as root (upo

Markdown version · Browse all CVEs