Aristanetworks

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Aristanetworks product.

RSS Feeds for Aristanetworks security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Aristanetworks products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Aristanetworks Sorted by Most Security Vulnerabilities since 2018

Aristanetworks Danz Monitoring Fabric5 vulnerabilities

Aristanetworks Arista Edge Threat Management Arista Next Generation Firewall3 vulnerabilities

Aristanetworks Eos1 vulnerability

By the Year

In 2026 there have been 0 vulnerabilities in Aristanetworks. Last year, in 2025 Aristanetworks had 9 security vulnerabilities published. Right now, Aristanetworks is on track to have less security vulnerabilities in 2026 than it did last year.

Year	Vulnerabilities	Average Score
2026	0	0.00
2025	9	6.58

It may take a day or so for new Aristanetworks vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Aristanetworks Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2025-8870	Nov 14, 2025	Arista EOS console input triggers unexpected reload (CVE-2025-8870) On affected platforms running Arista EOS, certain serial console input might result in an unexpected reload of the device.153	Eos
CVE-2025-54549	Oct 29, 2025	ISO Upgrade Validation Circumvention via Crafted File Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO	Danz Monitoring Fabric
CVE-2025-54548	Oct 29, 2025	Debug API Leak Exposes Pass Hashes On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)	Danz Monitoring Fabric
CVE-2025-54547	Oct 29, 2025	OpenSSH Client: SSH Multiplexing Timeout Bypass Allows Post-Timeout File Ops On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the same channel could perform file-system operations after a configured session timeout expired	Danz Monitoring Fabric
CVE-2025-54546	Oct 29, 2025	SSH Port Forwarding Enables Restricted Users to Reach Host-Internal Services On affected platforms, restricted users could use SSH port forwarding to access host-internal services	Danz Monitoring Fabric
CVE-2025-54545	Oct 29, 2025	CliSandboxEscape: Privilege Escalation via CLI Sandbox Exit On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.	Danz Monitoring Fabric
CVE-2025-6978	Oct 23, 2025	Diagnostics CLI Command Injection (CVE-2025-6978) Diagnostics command injection vulnerability	Arista Edge Threat Management Arista Next Generation Firewall
CVE-2025-6979	Oct 23, 2025	CVE-2025-6979: Captive Portal Auth Bypass Captive Portal can allow authentication bypass	Arista Edge Threat Management Arista Next Generation Firewall
CVE-2025-6980	Oct 23, 2025	CVE20256980: Sensitive Data Leakage via Captive Portal Captive Portal can expose sensitive information	Arista Edge Threat Management Arista Next Generation Firewall