CVE WatchNov 10, 2026

CVE-2026-120975

On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certifica

CVSS

3.1

Low

EPSS

—

KEV

—

Exploit Today

0-100

Published: Nov 10, 2026 · Last modified: Nov 10, 2026 · CWE-197

EPSS · 30d

Not enough EPSS history yet.

Technical description

On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.

Official references

www.arista.comhttps://www.arista.com/en/support/advisories-notices/security-advisory/25027-security-advisory-0205

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-882137.8 HIG

—

——0Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.5h CVE-2026-1199887.1 HIG

—

——0Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.11h CVE-2026-1198754.0 MED

—

——0Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.10h CVE-2026-1129817.8 HIG

—

——0Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.9h CVE-2026-1127657.0 HIG

—

——0Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.9h CVE-2026-1127545.5 MED

—

——0Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.9h