Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2026-102162: Arista Wi‑Fi access points can crash or be hijacked
CVE-2026-102162 · published 5 days ago
Summary
Arista Wi‑Fi access points that use a captive portal or have an application firewall on any Wi‑Fi network can be sent a specially crafted packet that makes the device stop working and may let an attacker take control. The problem happens in the wireless gateway service, which restarts automatically, so an attacker could try this repeatedly. Apply the latest firmware update from Arista to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| arista networks | wi-fi access points | <= 22.0.1F-32 |
Original advisory text
Security Advisory 0193
On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that triggers a stack overflow, resulting in a denial-of-service condition or potentially execute arbitrary code on the device. The wireless gateway service is automatically restarted after a crash, allowing repeated exploitation attempts.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
9.4
Critical
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published6 Oct 2026
Updated7 Oct 2026
First seen6 Oct 2026
Track software like this
Free during beta