CVE-2026-77190

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-77190", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "state": "PUBLISHED", "assignerShortName": "Arista", "dateReserved": "2026-08-20T16:41:21.387Z", "datePublished": "2026-09-16T10:08:55.181Z", "dateUpdated": "2026-09-16T13:26:25.980Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-09-16T10:08:55.181Z"}, "title": "Security Advisory 0177", "descriptions": [{"lang": "en", "value": "On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically restarted, but repeated attacks can cause the agent to restart continuously, resulting in a sustained denial of service.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically restarted, but repeated attacks can cause the agent to restart continuously, resulting in a sustained denial of service.</p>"}]}], "affected": [{"vendor": "Arista Networks", "product": "EOS", "platforms": ["710 Series", "720D Series", "720XP/722XPM Series", "750X Series", "7010TX Series", "7020R/R4 Series", "7130 Series running EOS", "7170 Series", "7050X3/X4 Series", "7060X/X2/X4/X5/X6 Series", "7260X/X3 Series", "7280R/R2/R3/R4 Series", "7300X/X3 Series", "7320X Series", "7358X4 Series", "7368X4 Series", "7388X5 Series", "7500R/R2/R3 Series", "7800R3/R4 Series", "cEOS-lab", "vEOS-lab"], "defaultStatus": "unaffected", "versions": [{"version": "4.36.0F", "lessThanOrEqual": "4.36.1F", "status": "affected", "versionType": "custom"}, {"version": "4.35.0F", "lessThanOrEqual": "4.35.5M", "status": "affected", "versionType": "custom"}, {"version": "4.34.2F", "lessThanOrEqual": "4.34.7M", "status": "affected", "versionType": "custom"}]}], "configurations": [{"lang": "en", "value": "In order to be vulnerable to CVE-2026-77190, the following conditions must both be met:\n\n1. PIM Sparse Mode must be configured (IPv4 or IPv6). For example:\n\n switch(config)# interface Ethernet1\n switch(config-if-Et1)# pim ipv4 sparse-mode\n\n switch# show agent Pimsm uptime\n Agent Name Restarts Uptime\n ------------------ -------------- ----------------\n Pimsm 1 2 days, 14:00:28\n\nor\n\n switch(config)# interface Vlan2\n switch(config-if-Vl2)# pim ipv6 sparse-mode\n\n switch# show agent Pimsm6 uptime\n Agent Name Restarts Uptime\n ------------------ -------------- ----------------\n Pimsm6 3 2 days, 14:00:20\n\n2. MLAG must be configured and active:\n\n switch(config)# mlag\n switch(config-mlag)# local-interface vlan 4094\n switch(config-mlag)# peer-address 10.0.0.2\n switch(config-mlag)# peer-link port-channel 10\n switch(config-mlag)# domain-id mlag1\n\n switch# show mlag\n MLAG Configuration:\n domain-id : mlag1\n local-interface : Vlan4094\n peer-address : 10.0.0.2\n peer-link : Port-Channel10\n MLAG Status:\n state : Active\n peer-link status : Up\n local-int status : Up\n system-id : 00:11:22:01:03:01", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>In order to be vulnerable to CVE-2026-77190, the following conditions must both be met:</p><p>1. PIM Sparse Mode must be configured (IPv4 or IPv6). For example:</p><pre>switch(config)# interface Ethernet1\nswitch(config-if-Et1)# pim ipv4 sparse-mode\n\nswitch# show agent Pimsm uptime\n Agent Name Restarts Uptime\n------------------ -------------- ----------------\nPimsm 1 2 days, 14:00:28</pre><p>or</p><pre>switch(config)# interface Vlan2\nswitch(config-if-Vl2)# pim ipv6 sparse-mode\n\nswitch# show agent Pimsm6 uptime\n Agent Name Restarts Uptime\n------------------ -------------- ----------------\nPimsm6 3 2 days, 14:00:20</pre><p>2. MLAG must be configured and active:</p><pre>switch(config)# mlag\nswitch(config-mlag)# local-interface vlan 4094\nswitch(config-mlag)# peer-address 10.0.0.2\nswitch(config-mlag)# peer-link port-channel 10\nswitch(config-mlag)# domain-id mlag1\n\nswitch# show mlag\nMLAG Configuration:\ndomain-id : mlag1\nlocal-interface : Vlan4094\npeer-address : 10.0.0.2\npeer-link : Port-Channel10\nMLAG Status:\nstate : Active\npeer-link status : Up\nlocal-int status : Up\nsystem-id : 00:11:22:01:03:01</pre>"}]}], "workarounds": [{"lang": "en", "value": "There is no mitigation or workaround available.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>There is no mitigation or workaround available.</p>"}]}], "solutions": [{"lang": "en", "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below.\n\nCVE-2026-77190 has been fixed in the following releases:\n- 4.36.2F and later releases in the 4.36.x train\n- 4.35.6M and later releases in the 4.35.x train\n- 4.34.8M and later releases in the 4.34.x train\n\nNo hotfix is available for this issue.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below.</p><p>CVE-2026-77190 has been fixed in the following releases:</p><ul><li>4.36.2F and later releases in the 4.36.x train</li><li>4.35.6M and later releases in the 4.35.x train</li><li>4.34.8M and later releases in the 4.34.x train</li></ul><p>No hotfix is available for this issue.</p>"}]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 6.5, "baseSeverity": "MEDIUM"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L", "baseScore": 6, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24733-security-advisory-0177", "name": "Security Advisory 0177", "tags": ["vendor-advisory"]}], "source": {"advisory": "Security Advisory 0177", "defects": ["BUG 1852734"], "discovery": "INTERNAL"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-09-16T13:26:18.181290Z", "id": "CVE-2026-77190", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-16T13:26:25.980Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-77190", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-16T13:26:18.181290Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-16T13:26:21.971Z"}}], "cna": {"title": "Security Advisory 0177", "source": {"defects": ["BUG 1852734"], "advisory": "Security Advisory 0177", "discovery": "INTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}, {"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Arista Networks", "product": "EOS", "versions": [{"status": "affected", "version": "4.36.0F", "versionType": "custom", "lessThanOrEqual": "4.36.1F"}, {"status": "affected", "version": "4.35.0F", "versionType": "custom", "lessThanOrEqual": "4.35.5M"}, {"status": "affected", "version": "4.34.2F", "versionType": "custom", "lessThanOrEqual": "4.34.7M"}], "platforms": ["710 Series", "720D Series", "720XP/722XPM Series", "750X Series", "7010TX Series", "7020R/R4 Series", "7130 Series running EOS", "7170 Series", "7050X3/X4 Series", "7060X/X2/X4/X5/X6 Series", "7260X/X3 Series", "7280R/R2/R3/R4 Series", "7300X/X3 Series", "7320X Series", "7358X4 Series", "7368X4 Series", "7388X5 Series", "7500R/R2/R3 Series", "7800R3/R4 Series", "cEOS-lab", "vEOS-lab"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below.\n\nCVE-2026-77190 has been fixed in the following releases:\n- 4.36.2F and later releases in the 4.36.x train\n- 4.35.6M and later releases in the 4.35.x train\n- 4.34.8M and later releases in the 4.34.x train\n\nNo hotfix is available for this issue.", "supportingMedia": [{"type": "text/html", "value": "<p>The recommended resolution is to upgrade to a remediated software version at your earliest convenience. Arista recommends customers move to the latest version of each release that contains all the fixes listed below.</p><p>CVE-2026-77190 has been fixed in the following releases:</p><ul><li>4.36.2F and later releases in the 4.36.x train</li><li>4.35.6M and later releases in the 4.35.x train</li><li>4.34.8M and later releases in the 4.34.x train</li></ul><p>No hotfix is available for this issue.</p>", "base64": false}]}], "references": [{"url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24733-security-advisory-0177", "name": "Security Advisory 0177", "tags": ["vendor-advisory"]}], "workarounds": [{"lang": "en", "value": "There is no mitigation or workaround available.", "supportingMedia": [{"type": "text/html", "value": "<p>There is no mitigation or workaround available.</p>", "base64": false}]}], "descriptions": [{"lang": "en", "value": "On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically restarted, but repeated attacks can cause the agent to restart continuously, resulting in a sustained denial of service.", "supportingMedia": [{"type": "text/html", "value": "<p>On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically restarted, but repeated attacks can cause the agent to restart continuously, resulting in a sustained denial of service.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "configurations": [{"lang": "en", "value": "In order to be vulnerable to CVE-2026-77190, the following conditions must both be met:\n\n1. PIM Sparse Mode must be configured (IPv4 or IPv6). For example:\n\n switch(config)# interface Ethernet1\n switch(config-if-Et1)# pim ipv4 sparse-mode\n\n switch# show agent Pimsm uptime\n Agent Name Restarts Uptime\n ------------------ -------------- ----------------\n Pimsm 1 2 days, 14:00:28\n\nor\n\n switch(config)# interface Vlan2\n switch(config-if-Vl2)# pim ipv6 sparse-mode\n\n switch# show agent Pimsm6 uptime\n Agent Name Restarts Uptime\n ------------------ -------------- ----------------\n Pimsm6 3 2 days, 14:00:20\n\n2. MLAG must be configured and active:\n\n switch(config)# mlag\n switch(config-mlag)# local-interface vlan 4094\n switch(config-mlag)# peer-address 10.0.0.2\n switch(config-mlag)# peer-link port-channel 10\n switch(config-mlag)# domain-id mlag1\n\n switch# show mlag\n MLAG Configuration:\n domain-id : mlag1\n local-interface : Vlan4094\n peer-address : 10.0.0.2\n peer-link : Port-Channel10\n MLAG Status:\n state : Active\n peer-link status : Up\n local-int status : Up\n system-id : 00:11:22:01:03:01", "supportingMedia": [{"type": "text/html", "value": "<p>In order to be vulnerable to CVE-2026-77190, the following conditions must both be met:</p><p>1. PIM Sparse Mode must be configured (IPv4 or IPv6). For example:</p><pre>switch(config)# interface Ethernet1\nswitch(config-if-Et1)# pim ipv4 sparse-mode\n\nswitch# show agent Pimsm uptime\n Agent Name Restarts Uptime\n------------------ -------------- ----------------\nPimsm 1 2 days, 14:00:28</pre><p>or</p><pre>switch(config)# interface Vlan2\nswitch(config-if-Vl2)# pim ipv6 sparse-mode\n\nswitch# show agent Pimsm6 uptime\n Agent Name Restarts Uptime\n------------------ -------------- ----------------\nPimsm6 3 2 days, 14:00:20</pre><p>2. MLAG must be configured and active:</p><pre>switch(config)# mlag\nswitch(config-mlag)# local-interface vlan 4094\nswitch(config-mlag)# peer-address 10.0.0.2\nswitch(config-mlag)# peer-link port-channel 10\nswitch(config-mlag)# domain-id mlag1\n\nswitch# show mlag\nMLAG Configuration:\ndomain-id : mlag1\nlocal-interface : Vlan4094\npeer-address : 10.0.0.2\npeer-link : Port-Channel10\nMLAG Status:\nstate : Active\npeer-link status : Up\nlocal-int status : Up\nsystem-id : 00:11:22:01:03:01</pre>", "base64": false}]}], "providerMetadata": {"orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "shortName": "Arista", "dateUpdated": "2026-09-16T10:08:55.181Z"}}}, "cveMetadata": {"cveId": "CVE-2026-77190", "state": "PUBLISHED", "dateUpdated": "2026-09-16T13:26:25.980Z", "dateReserved": "2026-08-20T16:41:21.387Z", "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7", "datePublished": "2026-09-16T10:08:55.181Z", "assignerShortName": "Arista"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["710 Series", "720D Series", "720XP/722XPM Series", "750X Series", "7010TX Series", "7020R/R4 Series", "7130 Series running EOS", "7170 Series", "7050X3/X4 Series", "7060X/X2/X4/X5/X6 Series", "7260X/X3 Series", "7280R/R2/R3/R4 Series", "7300X/X3 Series", "7320X Series", "7358X4 Series", "7368X4 Series", "7388X5 Series", "7500R/R2/R3 Series", "7800R3/R4 Series", "cEOS-lab", "vEOS-lab"], "product": "EOS", "vendor": "Arista Networks", "versions": [{"lessThanOrEqual": "4.36.1F", "status": "affected", "version": "4.36.0F", "versionType": "custom"}, {"lessThanOrEqual": "4.35.5M", "status": "affected", "version": "4.35.0F", "versionType": "custom"}, {"lessThanOrEqual": "4.34.7M", "status": "affected", "version": "4.34.2F", "versionType": "custom"}]}], "source": "psirt@arista.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device with PIM Sparse Mode and MLAG configured, can send malformed messages that cause the Pimsm agent to terminate unexpectedly. The Pimsm agent is automatically restarted, but repeated attacks can cause the agent to restart continuously, resulting in a sustained denial of service."}], "id": "CVE-2026-77190", "lastModified": "2026-09-16T19:08:50.420", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "psirt@arista.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.0, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "psirt@arista.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-77190", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-16T13:26:18.181290Z", "version": "2.0.3"}}]}, "published": "2026-09-16T10:16:53.030", "references": [{"source": "psirt@arista.com", "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24733-security-advisory-0177"}], "sourceIdentifier": "psirt@arista.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "psirt@arista.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["710_series", "720d_series", "720xp/722xpm_series", "750x_series", "7010tx_series", "7020r/r4_series", "7130_series_running_eos", "7170_series", "7050x3/x4_series", "7060x/x2/x4/x5/x6_series", "7260x/x3_series", "7280r/r2/r3/r4_series", "7300x/x3_series", "7320x_series", "7358x4_series", "7368x4_series", "7388x5_series", "7500r/r2/r3_series", "7800r3/r4_series", "ceos-lab", "veos-lab"], "status": "affected", "versions": {"scheme": "generic", "value": "[4.36.0F,4.36.1F]"}}, {"platform": ["710_series", "720d_series", "720xp/722xpm_series", "750x_series", "7010tx_series", "7020r/r4_series", "7130_series_running_eos", "7170_series", "7050x3/x4_series", "7060x/x2/x4/x5/x6_series", "7260x/x3_series", "7280r/r2/r3/r4_series", "7300x/x3_series", "7320x_series", "7358x4_series", "7368x4_series", "7388x5_series", "7500r/r2/r3_series", "7800r3/r4_series", "ceos-lab", "veos-lab"], "status": "affected", "versions": {"scheme": "generic", "value": "[4.35.0F,4.35.5M]"}}, {"platform": ["710_series", "720d_series", "720xp/722xpm_series", "750x_series", "7010tx_series", "7020r/r4_series", "7130_series_running_eos", "7170_series", "7050x3/x4_series", "7060x/x2/x4/x5/x6_series", "7260x/x3_series", "7280r/r2/r3/r4_series", "7300x/x3_series", "7320x_series", "7358x4_series", "7368x4_series", "7388x5_series", "7500r/r2/r3_series", "7800r3/r4_series", "ceos-lab", "veos-lab"], "status": "affected", "versions": {"scheme": "generic", "value": "[4.34.2F,4.34.7M]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "EOS", "source": "cna", "vendor": "Arista Networks"}, "product": "eos", "vendor": "arista"}], "created": "2026-09-17T20:49:48.520293+00:00", "updated": "2026-09-18T09:45:06.370897+00:00", "vendors": ["arista", "arista$PRODUCT$eos"]}