Vulnerability · Published Sep 16, 2026 · Assigned by Arista
CVE-2026-73436Security Advisory 0171
Medium 6.5
In plain English
A medium-severity out-of-bounds read in EOS from Arista Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 80.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet from an adjacent OSPF neighbor may cause OSPF to restart unexpectedly.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Arista Networks | EOS | 4.36.0F – through 4.36.1F4.35.0F – through 4.35.5M4.34.0F – through 4.34.7.1M4.33.0F – through 4.33.9M1.0.0 – before 4.33.0F |
Weakness: CWE-1284, CWE-125 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- Security Advisory 0171 vendor-advisory