CVE Tools

Arista

67 CVEs tracked since 2014. Since Sep 2014, 2 of them reached CISA KEV.

Arista CVEs per month

Sep 2014 to Jan 2025. Point at a month, or focus the strip and use the arrow keys.
Arista CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2014-0922
2014-10null or fewer
2014-11null or fewer
2014-12null or fewer
2015-01null or fewer
2015-02null or fewer
2015-03null or fewer
2015-04null or fewer
2015-05null or fewer
2015-0610
2015-07null or fewer
2015-0820
2015-09null or fewer
2015-10null or fewer
2015-1120
2015-12null or fewer
2016-01null or fewer
2016-02null or fewer
2016-03null or fewer
2016-04null or fewer
2016-05null or fewer
2016-06null or fewer
2016-07null or fewer
2016-08null or fewer
2016-09null or fewer
2016-10null or fewer
2016-11null or fewer
2016-12null or fewer
2017-01null or fewer
2017-02null or fewer
2017-03null or fewer
2017-04null or fewer
2017-05null or fewer
2017-06null or fewer
2017-07null or fewer
2017-08null or fewer
2017-09null or fewer
2017-10null or fewer
2017-11null or fewer
2017-12null or fewer
2018-01null or fewer
2018-02null or fewer
2018-03null or fewer
2018-04null or fewer
2018-05null or fewer
2018-06null or fewer
2018-07null or fewer
2018-08null or fewer
2018-09null or fewer
2018-10null or fewer
2018-11null or fewer
2018-12null or fewer
2019-01null or fewer
2019-02null or fewer
2019-03null or fewer
2019-04null or fewer
2019-05null or fewer
2019-06null or fewer
2019-07null or fewer
2019-0820
2019-09null or fewer
2019-1020
2019-11null or fewer
2019-1220
2020-0140
2020-02null or fewer
2020-03null or fewer
2020-04null or fewer
2020-05null or fewer
2020-0620
2020-07null or fewer
2020-08null or fewer
2020-0920
2020-1030
2020-11null or fewer
2020-1230
2021-0130
2021-02null or fewer
2021-03null or fewer
2021-04null or fewer
2021-0590
2021-06null or fewer
2021-07null or fewer
2021-08null or fewer
2021-0960
2021-10null or fewer
2021-11null or fewer
2021-12null or fewer
2022-0140
2022-02null or fewer
2022-03null or fewer
2022-04null or fewer
2022-05null or fewer
2022-06null or fewer
2022-07null or fewer
2022-08null or fewer
2022-09null or fewer
2022-10null or fewer
2022-11null or fewer
2022-12null or fewer
2023-01null or fewer
2023-02null or fewer
2023-03null or fewer
2023-0450
2023-05null or fewer
2023-06null or fewer
2023-07null or fewer
2023-08null or fewer
2023-09null or fewer
2023-10null or fewer
2023-11null or fewer
2023-12null or fewer
2024-01null or fewer
2024-02null or fewer
2024-03null or fewer
2024-04null or fewer
2024-05null or fewer
2024-06null or fewer
2024-07null or fewer
2024-08null or fewer
2024-09null or fewer
2024-10null or fewer
2024-11null or fewer
2024-1240
2025-0190

Products

The products that kept showing up in Arista's monthly top three, with their CVEs summed over those months.

  1. EOS2712 months
  2. Ng Firewall132 months
  3. C-65 Firmware81 month
  4. C-75 Firmware81 month
  5. W-68 Firmware81 month
  6. Cloudvision Portal65 months
  7. Metamako Operating System61 month
  8. Cloudeos42 months
  9. Access Point11 month
  10. Cloudvision Exchange11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Arista.

  1. CVE-2026-93952Security Advisory 018310.0
  2. CVE-2026-16812VeloCloud Orchestrator OS Command Injection10.0
  3. CVE-2026-25624Arista Edge Threat Management NGFW UI Administrative Cross-Site Scripting5.7
  4. CVE-2026-25623Arista Edge Threat Management NGFW UI Arbitrary Command Execution6.0
  5. CVE-2026-25622Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection6.0
  6. CVE-2026-25621Arista Edge Threat Management NGFW Reports Application Insecure Input Validation6.0
  7. CVE-2026-25620Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection6.0
  8. CVE-2026-7473Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass5.8
  9. CVE-2026-31431crypto: algif_aead - Revert to operating out-of-place7.8
  10. CVE-2025-2767Arista NG Firewall User-Agent Cross-Site Scripting Remote Code Execution Vulnerability9.6
  11. CVE-2024-9188Specially constructed queries cause cross platform scripting leaking administrator tokens8.8
  12. CVE-2024-47520A user with advanced report application access rights can perform actions for which they are not authorized7.6
  13. CVE-2024-47519Backup uploads to ETM subject to man-in-the-middle interception8.3
  14. CVE-2024-47518Specially constructed queries targeting ETM could discover active remote access sessions6.4
  15. CVE-2024-47517Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access6.8

The record

Peak rank
#46 in Nov 2015
Busiest month shown
May 2021, 9 CVEs
Months with a KEV entry
1 since Sep 2014
Monthly snapshots
19 since 2014
Arista's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store