CVE-2026-102167CWE-121

CVE-2026-102167

High · published October 7, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
13.3
In the wild
Unconfirmed
What it is

On affected Arista Wi-Fi access points, a memory corruption vulnerability exists in access point's wired uplink network endpoints. An unauthenticated attacker can crash the sensor service or potentially achieve remote code execution. Exploitation requires the attacker to be on the same network segment as the access point's wired uplink.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.0 · CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00232 · 13.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-10-07T00:17Z
References (1)
EPSS history
Timeline
  • 08 OCT 03:27Z
    EPSS moved — → 0%
    epss
  • 06 OCT 19:40Z
    Security Advisory 0197
    cvelistv5