CVE-2026-75945
Received Received - Intake

Race Condition in Arista EOS Supplicant After Clear Command

Publication date: 2026-09-14

Last updated on: 2026-09-15

Assigner: Arista Networks, Inc.

Description
A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-75945
EUVD
EUVD-2026-78214

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-459 The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves a race condition in network authentication where a supplicant (a device seeking network access) may incorrectly remain in an authorized state even after a command to clear all authorized hosts is issued. This could allow unauthorized devices to maintain network access unintentionally.

Impact Analysis

The impact is limited due to the low CVSS scores. An attacker in a nearby network position might exploit this to maintain unauthorized network access briefly, but the window for exploitation is small and requires specific timing conditions.

Compliance Impact

This vulnerability is unlikely to significantly impact compliance with standards like GDPR or HIPAA due to its low severity and limited potential for exploitation. However, organizations should still address it to ensure robust network access controls.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75945. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart