CVE-2026-120978 | BDVDB-2026-404475 Detail
Arista NetworksEOS
Description#
On affected Arista EOS platforms running Border Gateway Protocol with Link State ( BGP-LS) and configured with the Dynamic Path Selection (DPS) consumer role, an attacker who has established an authenticated BGP-LS session with the device can send a crafted message to cause the BGP agent to restart unexpectedly. An Arista Pathfinder deployment is not required.
Impact#
CAPEC-129 Pointer Manipulation
Weaknesses#
- CWE-476 NULL Pointer Dereference
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.