CVE-2026-102166

Name of the Vulnerable Software and Affected Versions Arista C-260 (affected versions not specified) Arista C-250 (affected versions not specified)

Description Arista C-260 and C-250 access points use fleet-wide static cryptographic keys for SSLP authentication and firmware image verification. An attacker with access to these keys could create modified firmware that bypasses verification checks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.