Login Request a demo
WA
Product
Wi-Fi Access Points
by Arista Networks · last CVE Oct 6, 2026
7
CVEs
0
On KEV
8.8
Max CVSS
7
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 4Medium 2Low 1
Severity
All severities7Critical0High4Medium2Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Wi-Fi Access Points to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-102163
8.8
0%
Oct 6
On affected Arista access points with Wireless Intrusion Prevention System (WIPS) active, an unauthenticated attacker within radio frequency (RF) proximity can send a crafted frame to crash the sensor
Affected: 22.0.0 through 22.0.1F-32; 21.3.0 through 21.3.0M-13; 1.0.0 before 21.3.0
CVE-2026-102162
8.8
0%
Oct 6
On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network
Affected: 22.0.0 through 22.0.1F-32; 21.3.0 through 21.3.0M-13; 1.0.0 before 21.3.0
CVE-2026-102165
7.5
0%
Oct 6
On affected Arista Wi-Fi access points, an unauthenticated attacker with network access to the capture service can send a crafted packet to cause the service to crash or potentially achieve remote cod
Affected: 22.0.0 through 22.0.1F-32; 21.3.0 through 21.3.0M-13; 1.0.0 before 21.3.0
CVE-2026-102167
7.5
0%
Oct 6
On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints
Affected: 22.0.0 through 22.0.1F-32; 21.3.0 through 21.3.0M-13; 1.0.0 before 21.3.0
CVE-2026-102169
6.5
0%
Oct 6
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a captive-portal-enabled SSID can crash the portal service with a crafted HTTP reque
Affected: 22.0.0 through 22.0.1F-32; 21.3.0 through 21.3.0M-13; 1.0.0 before 21.3.0
CVE-2026-102168
6.5
0%
Oct 6
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with a crafted HTTP reque
Affected: 22.0.0 through 22.0.1F-32; 21.3.0 through 21.3.0M-13; 1.0.0 before 21.3.0
CVE-2026-102164
3.1
0%
Oct 6
On affected Arista access points configured with VXLAN tunnelling and L2-proxy (a specific configuration unique to the VESPA use-case), a wireless client associated to the tunnelled SSID can send a cr
Affected: 22.0.0 through 22.0.1F-32; 21.3.0 through 21.3.0M-13; 1.0.0 before 21.3.0
Showing 7