CVE-2025-2826

LowCVSS 2.6/10Last modified Jun 17, 2026

Description

n affected platforms running Arista EOS, ACL policies may not be enforced. IPv4 ingress ACL, MAC ingress ACL, or IPv6 standard ingress ACL enabled on one or more ethernet or LAG interfaces may result in ACL policies not being enforced for ingress packets. This can cause incoming packets to incorrectly be allowed or denied. The two symptoms of this issue on the affected release and platform are:

* Packets which should be permitted may be dropped and, * Packets which should be dropped may be permitted.

Metrics

CVSS 3.1 2.6/10CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-1284

Affected software

No affected versions have been published.

Timeline

Published: May 27, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-28274.3IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installation directory inform CVE-2025-282810.0A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically,CVE-2025-28297.8A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the alloc CVE-2025-28306.3By crafting a malformed file name for an attachment in a multipart message, an attacker can trick Thunderbird into including a directory lis CVE-2025-28319.8A vulnerability has been found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as CVE-2025-28324.3A vulnerability was found in mingyuefusu 明月复苏 tushuguanlixitong 图书管理系统 up to d4836f6b49cd0ac79a4021b15ce99ff7229d4694 and classified as prob CVE-2025-28335.3A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been classified as problematic. Affected is an unknown function of the co CVE-2025-283437.5striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function ThreadReadButtons.CVE-2025-283447.5striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack.CVE-2025-28354.3A vulnerability was found in zhangyd-c OneBlog up to 2.3.9. It has been declared as problematic. Affected by this vulnerability is the funct CVE-2025-283546.5An issue in the Printer Manager Systm of Entrust Corp Printer Manager D3.18.4-3 and below allows attackers to execute a directory traversal CVE-2025-283554.7Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery (CSRF) allowing attackers to execute arbitrary code an