CVE-2026-102166
Security Advisory 0227
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image verification and SSLP authentication. An attacker who is able to access these keys would be able to create modified firmware that will pass verification checks. This vulnerability is specific to the C-260 and C-250 models; other access point models enforce digitally signed upgrade images with secure boot and are not affected by this issue.
| CWE | CWE-798 |
| Vendor | arista networks |
| Product | wi-fi access point |
| Published | Nov 10, 2026 |
Stay Ahead of the Next One
Get instant alerts for arista networks wi-fi access point
Be the first to know when new high vulnerabilities affecting arista networks wi-fi access point are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Arista Networks / Wi-Fi Access Point
1.0.0 < *