CVE-2026-120977
8.2 HIGHPublished 2026-11-10 · Updated 2026-11-10
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may potentially allow the authenticated supplicant to acquire unauthorized access to a network segment with elevated privileges.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N
Weaknesses
CWE-807
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- LOWCVE-2026-101079PoC
- LOWCVE-2026-101131
- HIGHCVE-2026-102117PoC
- HIGHCVE-2026-102234
- MEDIUMCVE-2026-103267PoC
- UNSCOREDCVE-2026-103923PoC
- HIGHCVE-2026-104658
- MEDIUMCVE-2026-105458
Related by shared AI tags and CWE weakness class. Browse the full archive.