CVE Watch10 de nov. de 2026

CVE-2026-120975

On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certifica

CVSS

3.1

Baixa

EPSS

—

KEV

—

Exploit Today

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-197

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate Authority (CA) certificate retrieval enabled, a malicious packet may cause the AutoCertMgmt process to be terminated unexpectedly. Managed X.509 certificates will not be renewed automatically and may eventually expire, potentially disrupting TLS-dependent services.

Referências oficiais

www.arista.comhttps://www.arista.com/en/support/advisories-notices/security-advisory/25027-security-advisory-0205

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-882137.8 ALT

—

——0Numeric truncation error in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.6h CVE-2026-1199887.1 ALT

—

——0Numeric truncation error in Windows SMB allows an authorized attacker to execute code over a network.12h CVE-2026-1198754.0 MÉD

—

——0Numeric truncation error in Windows Storport Miniport Driver allows an authorized attacker to disclose information with a physical attack.11h CVE-2026-1129817.8 ALT

—

——0Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.10h CVE-2026-1127657.0 ALT

—

——0Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.10h CVE-2026-1127545.5 MÉD

—

——0Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to disclose information locally.10h