Arista Networks CloudVision Portal

• CVE-2026-101155 Critical 9.1 Security Advisory 0189 0.6%
• CVE-2026-101154 High 7.2 Security Advisory 0189 0.6%
• CVE-2026-101153 High 8.0 Security Advisory 0188 0.3%
• CVE-2026-101152 High 8.0 Security Advisory 0187 0.4%
• CVE-2026-101151 Medium 4.3 Security Advisory 0187 0.3%
• CVE-2026-101150 Medium 4.1 Security Advisory 0186 0.2%
• CVE-2026-101149 Medium 4.1 Security Advisory 0186 0.2%
• CVE-2026-101158 High 8.4 Security Advisory 0185 0.3%
• CVE-2024-12378 Critical 9.1 On affected platforms running Arista EOS with secure Vxlan configured, restarting the Tunnelsec agent will result in packets being sent over the secure Vxlan tunnels in the clear. 0.5%
• CVE-2024-11186 Critical 10.0 On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-prem 0.8%
• CVE-2025-0505 Critical 10.0 On Arista CloudVision systems (virtual or physical on-premise deployments), Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state 0.7%
• CVE-2022-29071 Medium 4.0 This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ... 0.2%