Vulnerability · Published Sep 16, 2026 · Assigned by Arista
CVE-2026-73468Security Advisory 0175
Medium 6.5
In plain English
A medium-severity security flaw in EOS from Arista Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.3%top 78.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in temporary multicast traffic loss during the affected period.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Arista Networks | EOS | 1.0.0 – before 4.33.0F4.33.0F – through 4.33.8M4.34.0F – through 4.34.7.1M4.35.0F – through 4.35.5M4.36.0F – through 4.36.1F |
Weakness: CWE-670 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H