CVE-2026-102167
7.5 HIGHPublished 2026-10-06 · Updated 2026-10-07
AI risk analysis
- Summary
- A memory corruption vulnerability in Arista Wi-Fi access points allows unauthenticated attackers on the same network segment to crash the sensor service or potentially achieve remote code execution. This represents a significant security risk as it could lead to complete device compromise and potential network infiltration.
- Exploitability
- Exploitation requires an attacker to be on the same network segment as the access point's wired uplink, making it moderately difficult but achievable in environments where attackers can establish a presence on the local network.
- Blast radius
- If exploited, this vulnerability could affect multiple Wi-Fi access points across the network, potentially allowing attackers to gain persistent access to wireless infrastructure and compromise wireless network communications.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Arista OS 2.590 or later to remediate this memory corruption vulnerability.
wirelessmemory-corruptionrce
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-121
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-102165
- HIGHCVE-2026-100209
- HIGHCVE-2026-100211
- CRITICALCVE-2026-100219
- HIGHCVE-2026-100805
- HIGHCVE-2026-102163
- CRITICALCVE-2026-104192PoC
- HIGHCVE-2026-106110PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.