CVE-2026-102162: critical vulnerability in Arista Networks Wi-Fi Access Points
Security Advisory 0193
Published
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.4epss 0.2%
exploitation probability
0.2%top 86% of all CVEs
observed exploitation
nono source reports it
On affected Arista Wi-Fi access points with captive portal, or application firewall enabled on at least one SSID, a vulnerability in the wireless gateway service could allow an unauthenticated network-adjacent attacker to send a crafted packet that triggers a stack overflow, resulting in a denial-of-service condition or potentially execute arbitrary code on the device. The wireless gateway service is automatically restarted after a crash, allowing repeated exploitation attempts.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Affected products
Arista Networks · Wi-Fi Access PointsRelated CVEs — Arista Networks Wi-Fi Access Points
In the same product, most dangerous first.
CVE-2026-102163HIGHSecurity Advisory 0195EPSS 0.3%CVE-2026-102169HIGHSecurity Advisory 0194EPSS 0.3%CVE-2026-102168HIGHSecurity Advisory 0194EPSS 0.3%CVE-2026-102165HIGHSecurity Advisory 0198EPSS 0.2%CVE-2026-102167CRITICALSecurity Advisory 0197EPSS 0.2%CVE-2026-102164LOWSecurity Advisory 0196EPSS 0.2%