Arista Networks, US0404132054

Arista issues PHP security advisory for Arista Networks stock

Published on 10/29/2026 at 11:14 | Editorial responsibility: Rafael Müller, Editor-in-Chief AD HOC NEWS

Two PHP flaws carry CVSS 9.8 severity. Arista Networks stock has an October 23, 2026 advisory, with automatic fixes for affected cloud services.

Security advisory details

Arista issued Security Advisory 0200 on October 23, 2026.
The two PHP vulnerabilities carry CVSSv3.1 scores of 9.8.
Arista Networks stock trades at EUR 163.63 at 11:09 a.m. CET at Lang & Schwarz on October 29, 2026.
CloudVision CUE and Arista Edge Threat Management were upgraded to unaffected PHP versions.

Arista Networks, US0404132054, Illustration mit AI erstellt.

Arista Networks (ISIN US0404132054) issued a security advisory covering two PHP vulnerabilities with CVSSv3.1 scores of 9.8. The company dated the advisory October 23, 2026 and revised it on October 26, according to Arista.

Two vulnerabilities reach critical severity

The notice identifies CVE-2026-109618 and CVE-2026-109619. Both involve PHP memory-handling problems that could enable remote code execution under specific conditions, and both carry CVSSv4.0 scores of 9.2.

The company says its software products are unaffected. CloudVision CUE cloud service delivery and Arista Edge Threat Management had already been upgraded to unaffected PHP versions, while the advisory lists Arista EOS products and several network platforms as not affected.

What does the fix mean for customers?

Arista says the vulnerabilities have been fixed in the affected cloud services and that the upgrades will be applied automatically. It also states that no customer-side action is required, which makes the notice primarily a remediation update rather than a product disruption.

The new advisory differs from the September 9, 2026 advisories covering selected EOS and 802.1X conditions. Those earlier notices were revised on September 22, while Advisory 0200 concerns PHP vulnerabilities disclosed by external security researchers and carries a separate revision history.

Results remain the next company date

Arista has scheduled its third-quarter 2026 results for November 3, 2026, covering the quarter ended September 30, 2026. The company also scheduled investor conferences for December 1, December 7 and December 10, 2026, according to its investor-relations release.

Stock and security update

For investors, the advisory adds a dated operational update while the next financial report remains the more direct test of Arista's earnings outlook. The stock was trading at EUR 163.63 at Lang & Schwarz on October 29, 2026 at 11:09 a.m. CET.

The further course of trading is shown by the continuously updated real-time quote of Arista Networks stock.