CVE-2026-75944 — LOW (2.6) — White Hats Nepal

Vulnerability Description

A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants, resulting in incorrect access control enforcement. User interaction (an AclAgent restart by an administrator) is required for the unintended behavior to take effect.

CVSS Score

2.6

LOW

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Attack Vector

ADJACENT_NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

NONE

Related Weaknesses (CWE)

CWE-459

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24706-sec

FAQ

What is CVE-2026-75944?

CVE-2026-75944 is a vulnerability with a CVSS score of 2.6 (LOW). A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants,...

How severe is CVE-2026-75944?

CVE-2026-75944 has been rated LOW with a CVSS base score of 2.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-75944?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.