CVE-2026-102168— Security Advisory 0194
Quick assessment
Affected
Arista Networks Wi-Fi Access Points
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在启用了强制门户（Captive Portal）功能的受影响 Arista 无线接入点上，未认证的无线客户端连接到启用了强制门户的服务集标识符（SSID）后，可通过构造的 HTTP 请求导致门户服务崩溃。该漏洞会导致临时性的服务中断，直到门户服务自动重启。无法实现远程代码执行。
Possible ATT&CK Techniques 2 AI
T1499 · Endpoint Denial of Service T1499.002 · Service Exhaustion FloodAffected Version Matrix 3
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Arista Networks | Wi-Fi Access Points | 22.0.0≤ 22.0.1F-32 |
affected |
21.3.0≤ 21.3.0M-13 |
affected | ||
1.0.0< 21.3.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102168
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Security Advisory 0194
Source: CVE Program / CVE List V5
Vulnerability Description
On affected Arista Wi-Fi access points with Captive Portal enabled, an unauthenticated wireless client connected to a Captive-Portal-enabled SSID can crash the portal service with a crafted HTTP request. This results in a temporary denial of service until the service automatically restarts. Remote code execution is not possible.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
整数下溢(超界折返)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Arista Networks | Wi-Fi Access Points | 22.0.0 ~ 22.0.1F-32 | - |
|
II. Public POCs for CVE-2026-102168
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102168
请登录查看更多情报信息。
Other References for CVE-2026-102168 (1)
Same Patch Batch · Arista Networks · 2026-10-06 · 24 CVEs total
| CVE-2026-102159 | 9.8 CRITICAL | Security Advisory 0190 |
| CVE-2026-101155 | 9.1 CRITICAL | Security Advisory 0189 |
| CVE-2026-102161 | 8.8 HIGH | Security Advisory 0190 |
| CVE-2026-102162 | 8.8 HIGH | Security Advisory 0193 |
| CVE-2026-102163 | 8.8 HIGH | Security Advisory 0195 |
| CVE-2026-101157 | 8.7 HIGH | Security Advisory 0192 |
| CVE-2026-102155 | 8.5 HIGH | Security Advisory 0190 |
| CVE-2026-101156 | 8.4 HIGH | Security Advisory 0192 |
| CVE-2026-101158 | 8.4 HIGH | Security Advisory 0185 |
| CVE-2026-101153 | 8.0 HIGH | Security Advisory 0188 |
| CVE-2026-101152 | 8.0 HIGH | Security Advisory 0187 |
| CVE-2026-102167 | 7.5 HIGH | Security Advisory 0197 |
| CVE-2026-102165 | 7.5 HIGH | Security Advisory 0198 |
| CVE-2026-101154 | 7.2 HIGH | Security Advisory 0189 |
| CVE-2026-102160 | 7.2 HIGH | Security Advisory 0190 |
| CVE-2026-102156 | 6.8 MEDIUM | Security Advisory 0191 |
| CVE-2026-102158 | 6.5 MEDIUM | Security Advisory 0190 |
| CVE-2026-102169 | 6.5 MEDIUM | Security Advisory 0194 |
| CVE-2026-102157 | 5.9 MEDIUM | Security Advisory 0190 |
| CVE-2026-101151 | 4.3 MEDIUM | Security Advisory 0187 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-102168
No comments yet