Login Request a demo
EO
Product
EOS
by Arista Networks · last CVE Sep 16, 2026
On CISA KEVExploited in the wild
53
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities53In the news2Timeline
Severity mix
Critical 6High 11Medium 30Low 6
Severity
All severities53Critical6High11Medium30Low6
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add EOS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-73464
8.8
1%
Sep 16
On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management In
Affected: 4.29.0F before 4.30.0F; 4.30.0F before 4.31.0F; 4.31.0F before 4.32.0F; 4.32.0F before 4.33.0F; 4.33.0F through 4.33.8M; 4.34.0F through 4.34.7M; +2 more
CVE-2026-73435
8.2
0%
Sep 16
On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on the same broadcast segment,
Affected: 4.36.0F through 4.36.1F; 4.35.0F through 4.35.5M; 4.34.0F through 4.34.7M; 4.33.0F through 4.33.9M; 1.0.0 before 4.33.0F
CVE-2026-73458
8.2
0%
Sep 15
On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou
Affected: 4.36.0 through 4.36.1F; 4.35.0 through 4.35.5M; 4.34.0 through 4.34.7M; 4.33.0 through 4.33.8M
CVE-2026-73454
8.1
0%
Sep 16
On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a specially crafted request can cause unintended modifications to the target account's prop
Affected: 4.30.0F before 4.31.0F; 4.31.0F before 4.32.0F; 4.32.0F before 4.33.0F; 4.33.0F through 4.33.8M; 4.34.0F through 4.34.7M; 4.35.0F through 4.35.5M; +1 more
CVE-2026-73461
8.0
0%
Sep 16
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorizatio
Affected: 4.29.0F before 4.30.0F; 4.30.0F before 4.31.0F; 4.31.0F before 4.32.0F; 4.32.0F through 4.32.11M; 4.33.0F through 4.33.8M; 4.34.0F through 4.34.7M; +2 more
CVE-2026-73455
7.5
0%
Sep 16
On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly.
Affected: 1.0.0 before 4.33.0F; 4.33.0F through 4.33.8M; 4.34.0F through 4.34.6M; 4.35.0F through 4.35.4M; 4.36.0F through 4.36.0.1F
CVE-2026-73439
7.5
0%
Sep 16
On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on the system, then gN
Affected: 4.33.2F through 4.33.8M; 4.34.0F through 4.34.6M; 4.35.0F through 4.35.5M; 4.36.0F through 4.36.0.1F
CVE-2025-8873
7.5
0%
Jun 4
Arista EOS Dataplane Denial of Service via Malformed IPsec Packet
Affected: 4.33.0M through 4.33.4M; 4.32.0M through 4.32.6.1M; 4.31.0M through 4.31.7.1M; 4.30.0M through 4.30.10M; 4.29.0M through 4.29.10.1M
CVE-2026-2380
7.4
0%
Sep 16
On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and responses may be unintentionally logged
Affected: 4.36.0F through 4.36.1F; 4.35.0F before 4.36.0F; 4.34.0F before 4.35.0F; 4.33.0F before 4.34.0F; before 4.33.0F
CVE-2026-73459
7.4
0%
Sep 15
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from
Affected: 4.36.0 through 4.36.1F
CVE-2026-73446
7.4
0%
Sep 15
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit (PDU) that causes the device to t
Affected: 4.36.0 through 4.36.1F; 4.35.0 through 4.35.5M; 4.34.0 through 4.34.7.1M; 4.33.0 through 4.33.9M; 4.32.0 before 4.33.0F; 4.31.0 before 4.32.0F
Showing 11