CVE-2026-102169

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-07

Assigner: Arista Networks, Inc.

Description

On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service with a crafted HTTP request. The service automatically restarts, but a sustained low-rate attack can cause a persistent denial of service of the captive portal. Remote code execution is not possible.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-07

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102169

EUVD

EUVD-2026-93964

Affected Vendors & Products

Vendor	Product	Version / Range
Arista	Networks	Wi-Fi Access Points 22.0.0
Arista	Networks	Wi-Fi Access Points 21.3.0
Arista	Networks	Wi-Fi Access Points 1.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability affects Arista Wi-Fi access points with Captive Portal enabled. An unauthenticated wireless client can crash the portal service by sending a specially crafted HTTP request. The service restarts automatically, but repeated low-rate attacks can cause a persistent denial of service, disrupting the captive portal functionality.

Detection Guidance

Detecting this vulnerability requires monitoring for repeated crashes of the captive portal service on Arista Wi-Fi access points. Check system logs for HTTP request-related crashes or service restarts. Use network monitoring tools to detect low-rate HTTP traffic targeting captive portal-enabled SSIDs.

Impact Analysis

If you use Arista Wi-Fi access points with Captive Portal enabled, an attacker could exploit this flaw to repeatedly crash the portal service. This would disrupt network access for users who rely on the captive portal, causing downtime and potential loss of connectivity.

Compliance Impact

This vulnerability causes a denial of service for the captive portal service, disrupting network access authentication. For GDPR, it may impact availability of network services, potentially affecting data processing operations. For HIPAA, it could disrupt access to systems handling protected health information, though no data exposure is indicated.

Mitigation Strategies

Disable the captive portal feature on affected Arista Wi-Fi access points if not required. Apply vendor patches or updates as soon as they become available. Restrict access to the captive portal management interface to trusted networks only.

Hi! I’m here to help you understand CVE-2026-102169. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70