CVE-2026-120974
5.3 MEDIUMPublished 2026-11-10 · Updated 2026-11-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec replay window may not be applied as expected. As a result, IPsec anti-replay protection may be silently inactive even when it has been configured via an SA policy, contrary to the operator's expectation. This issue does not allow decryption of the affected IPsec traffic, but it may allow replay of previously valid protected traffic.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-294
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100834PoC
- CRITICALCVE-2026-102894PoC
- HIGHCVE-2026-103314
- UNSCOREDCVE-2026-103655PoC
- MEDIUMCVE-2026-104105PoC
- UNSCOREDCVE-2026-104381
- MEDIUMCVE-2026-105485
- MEDIUMCVE-2026-114617PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.