CVE-2026-102162
Wi-Fi Access Points: Security Advisory 0193
Arista Networks Wi-Fi Access Points
CVSS
8.8HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.25%Chance of exploitation activity in the next 30 days, higher than 14% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 21.3.0Wi-Fi Access PointsCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that triggers a stack overflow, resulting in a denial-of-service condition or potentially execute arbitrary code on the device. The wireless gateway service is automatically restarted after a crash, allowing repeated exploitation attempts.
Text from CVE List
Affected versions 3
- Wi-Fi Access Pointsaffected: 22.0.0 through 22.0.1F-32CVE List
- Wi-Fi Access Pointsaffected: 21.3.0 through 21.3.0M-13CVE List
- Wi-Fi Access Pointsaffected: 1.0.0 before 21.3.0CVE List