High severity8.2NVD Advisory· Published Nov 10, 2026

CVE-2026-120977

Description

On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may potentially allow the authenticated supplicant to acquire unauthorized access to a network segment with elevated privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Arista/Eosllm-fuzzy

Patches

Vulnerability mechanics

References

www.arista.com/en/support/advisories-notices/security-advisory/25039-security-advisory-0217nvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000