CVE-2026-2379CWE-672

Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled

High · published June 5, 2026

CVSS v4.0
8.2
EPSS
0%
Percentile
12.6
In the wild
Unconfirmed
What it is

On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibit unexpected behavior in specific cases. Physical interface flaps and certain agent restarts can cause IPsec tunnel re-establishment with existing Security Associations, resulting in sequence number mismatches between tunnel endpoints potentially causing unstable communication.

The record
Technical detail
CVSS v4.0
8.2 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00226 · 12.6th percentile
Weakness
CWE-672 · Operation on a Resource after Expiration or Release
Published
2026-06-05T17:59Z
EPSS history
Timeline
  • 05 JUN 17:59Z
    Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled
    cvelistv5