UNKNOWN Arista PoC
CVE-2025-49844
Security Advisory 0139
Date: May 19, 2026
Revision
Date
Changes
1.0
May 19, 2026
Initial release
The CVE-ID tracking this issue: CVE-2025-49844 CVSSv3.1 Base Score: 9.9 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) CVSSv4.0 Base Score: 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H) Common Weakness Enumeration: CWE-416 Use After FreeThis vulnerability is being tracked by BUG1140119 and BUG1391625
Description
On affected Arista platforms running Media Control Service (M ...
Affected Products
- CVE-2025-49844
References
- https://www.arista.com/en/support/advisories-notices/security-advisory/24029-security-advi
- https://nvd.nist.gov/vuln/detail/CVE-2025-49844
This unknown severity vulnerability was published on 2026-05-18 via Arista. 🚨 A public proof-of-concept exploit is available on GitHub. EPSS score: 86.8% (top 0% of all CVEs by exploitation probability). Affected: CVE-2025-49844.
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.