Arista Access Points Vulnerable to Remote Code Execution Exploit
CVE-2026-102163

8.7HIGH

Key Information:

Vendor

Arista Networks

Status
Wi-fi Access Points
Vendor
CVE Published:
6 October 2026

What is CVE-2026-102163?

A vulnerability exists in Arista access points equipped with the Wireless Intrusion Prevention System (WIPS). This vulnerability allows an unauthenticated attacker, who is within radio frequency proximity to the device, to send a specially crafted frame to the access point. This can lead to the crash of the sensor service, effectively disabling the WIPS monitoring capabilities. Furthermore, there is a potential risk of remote code execution due to the exploit, as no wireless association or authentication is necessary for the attack.

Affected Version(s)

Wi-Fi Access Points Wi-Fi Access Points 22.0.0 <= 22.0.1F-32

Wi-Fi Access Points Wi-Fi Access Points 21.3.0 <= 21.3.0M-13

Wi-Fi Access Points Wi-Fi Access Points 1.0.0 < 21.3.0

References

https://www.arista.com/en/support/advisories-notices/secu...
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.