Arista Networks EOS

• CVE-2026-7473 Medium 5.8 Exploited Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass 1.1%
• CVE-2026-73462 Medium 6.5 On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I 0.3%
• CVE-2026-73457 Medium 5.3 Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users. 0.3%
• CVE-2026-73456 Critical 10.0 Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch. 0.7%
• CVE-2026-73442 Low 3.0 On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receiving for 0.2%
• CVE-2026-73443 Medium 4.7 On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indef 0.3%
• CVE-2026-77190 Medium 6.5 Security Advisory 0177 0.3%
• CVE-2026-73468 Medium 6.5 Security Advisory 0175 0.3%
• CVE-2026-73440 Medium 4.2 Security Advisory 0178 0.3%
• CVE-2026-73469 Medium 5.8 Security Advisory 0176 0.3%
• CVE-2026-73453 Critical 10.0 Security Advisory 0174 0.7%
• CVE-2026-73455 High 7.5 Security Advisory 0173 0.5%
• CVE-2026-73438 Medium 5.3 Security Advisory 0172 0.2%
• CVE-2026-73436 Medium 6.5 Security Advisory 0171 0.3%
• CVE-2026-73435 High 8.2 Security Advisory 0171 0.2%
• CVE-2026-19640 Medium 4.2 Security Advisory 0170 0.2%
• CVE-2026-73463 Medium 5.3 Security Advisory 0169 0.2%
• CVE-2026-73445 Medium 4.9 Security Advisory 0167 0.4%
• CVE-2026-2380 High 7.4 Security Advisory 0168 0.3%
• CVE-2026-73464 High 8.8 Security Advisory 0166 0.6%
• CVE-2026-73454 High 8.1 Security Advisory 0165 0.4%
• CVE-2026-73439 High 7.5 Security Advisory 0164 0.4%
• CVE-2026-73461 High 8.0 Security Advisory 0163 0.4%
• CVE-2026-73447 Critical 9.1 Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request 0.7%
• CVE-2026-73450 Medium 6.9 Security Advisory 0161 0.2%
• CVE-2026-73460 Medium 6.1 Security Advisory 0160 0.2%
• CVE-2026-73459 High 7.4 Security Advisory 0160 0.2%
• CVE-2026-73446 High 7.4 Security Advisory 0160 0.3%
• CVE-2026-73444 Medium 4.7 On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the 0.3%
• CVE-2026-73437 Critical 9.6 On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper/destinat 0.2%
• CVE-2026-19655 Medium 6.5 On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent 0.3%
• CVE-2026-73458 High 8.2 On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou 0.4%
• CVE-2026-73467 Medium 6.3 On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers 0.1%
• CVE-2026-73466 Medium 6.3 On affected platforms running Arista EOS, under certain circumstances plaintext user passwords 0.1%
• CVE-2026-73465 Medium 6.3 On affected platforms running Arista EOS, under certain circumstances plaintext private keys 0.1%
• CVE-2026-19641 Medium 5.3 On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legit 0.5%
• CVE-2026-73451 Medium 4.8 On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can 0.2%
• CVE-2026-75945 Low 2.6 A race condition may cause a supplicant to remain in an authorized state after a clear dot1x host all command is issued. 0.2%
• CVE-2026-75944 Low 2.6 A race condition during supplicant re-authentication may leave a stale ACL entry that persists in the system. If the AclAgent subsequently restarts, this stale entry may be applied to new supplicants, resulting in incorrect access control enforcement. User 0.2%
• CVE-2026-75943 Low 2.6 A brief (milliseconds to seconds) traffic leak may occur when an authenticated supplicant is removed, either via the clear dot1x host all CLI command or due to a supplicant timeout. During this window, the supplicant's traffic may pass without ACL enforcem 0.2%
• CVE-2026-77191 Low 2.6 All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with 802.1X authentication and authorization enabled and Access Control Lists (ACLs) configured for per-supplicant policy enforcement. An authenticated supplicant on an 0.2%
• CVE-2026-73449 Medium 5.9 On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authorization, a low-privileged attacker on an adjacent network segment who induces a RADIUS packet through a configured RADI 0.2%
• CVE-2026-2379 Medium 5.9 Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled 0.2%
• CVE-2025-8873 High 7.5 Arista EOS Dataplane Denial of Service via Malformed IPsec Packet 0.4%
• CVE-2023-5502 Medium 5.9 On affected platforms running Arista EOS with 802.1x authentication configured on the access/trunk ports, a malicious supplicant may bypass authentication. 0.3%
• CVE-2024-27892 Critical 9.6 On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (SSL Profiles Enabled). 0.3%
• CVE-2024-27890 Critical 9.6 On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled). 4.4%
• CVE-2024-27891 Medium 5.3 On affected platforms running Arista EOS with MACsec and egress ACLs configured on the same interfaces, the ACL policies may not be enforced for packets egressing on those ports. 0.3%
• CVE-2024-6858 Medium 6.5 In Arista’s EOS when in 802.1X mode, multi-auth unauthenticated hosts might be allowed access to a switch port if there exists an EAPOL capable device in the fallback VLAN. 0.1%
• CVE-2025-7048 Medium 4.3 On affected platforms running Arista EOS with MACsec configuration, a specially crafted packet can cause the MACsec process to terminate unexpectedly. Continuous receipt of these packets with certain MACsec configurations can cause longer term disruption o 0.2%