CVE-2026-120977
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Nov 10, 2026
Vendor
unknown
Description
On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling enabled, a network-adjacent attacker can send a crafted DHCP packet to force the device to record a spoofed device profile. This may potentially allow the authenticated supplicant to acquire unauthorized access to a network segment with elevated privileges.