CVE-2026-121294

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description On platforms with a S-BFD reflector proxy configured, an unauthenticated attacker can send a crafted S-BFD Protocol Data Unit (PDU) to cause the device to temporarily stop reflecting S-BFD packets. This behavior may lead to S-BFD session timeouts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.