CVE-2026-75943

Received Received - Intake

Authenticated Supplicant Removal Traffic Leak in Arista EOS

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: Arista Networks, Inc.

Description

A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcement.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-09-15

AI Q&A

2026-09-15

EPSS Evaluated

N/A

NVD

CVE-2026-75943

EUVD

EUVD-2026-78211

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-459	The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

Attack-Flow Graph

Executive Summary

This vulnerability involves a brief traffic leak lasting milliseconds to seconds when an authenticated supplicant is removed. This can happen via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without proper Access Control List (ACL) enforcement.

Detection Guidance

Detecting this vulnerability requires monitoring for unauthorized traffic during the brief window after supplicant removal. Check logs for ACL bypass events or unexpected traffic patterns following dot1x host removal or supplicant timeouts.

Impact Analysis

The impact is limited but could allow unauthorized traffic to bypass security controls temporarily. Since ACL enforcement is bypassed, sensitive data might be exposed or unauthorized access could occur during the brief leak window. The risk is higher in environments where strict network access control is critical.

Compliance Impact

This vulnerability may pose compliance risks by allowing unauthorized traffic to bypass security controls. For GDPR, it could impact data protection measures. For HIPAA, it might affect access controls for protected health information. Organizations must assess if this brief exposure violates their compliance requirements.

Mitigation Strategies

Immediately update network devices to the latest firmware that addresses this issue. Review and strengthen ACL policies to minimize impact during the leak window. Monitor traffic closely after supplicant removal events.

Hi! I’m here to help you understand CVE-2026-75943. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70