CVE-2026-73464 – Arista EOS
“Your switches route every packet your business sends, and four of these flaws hand an attacker the keys to them.”
This Arista EOS update fixes seven vulnerabilities in the switch operating system's management and network services. Two flaws carry perfect 10.0 scores: an unauthenticated attacker can run arbitrary code and take full administrative control of a switch through P4Runtime or the gRPC Network Packet Sampling Interface (gNPSI). Other flaws let authenticated users run commands as root, raise their privileges, or let a network attacker feed malicious DHCP settings to clients.
CVE-2026-73453 has a CVSS score of 10.0, Critical severity. CVE-2026-73456 has a CVSS score of 10.0, Critical severity. CVE-2026-73437 has a CVSS score of 9.6, Critical severity, and lets unvalidated DHCP replies redirect or disrupt client traffic. CVE-2026-73447 has a CVSS score of 9.1, Critical severity, and allows root command execution through the gNSI Certz and Bootz services. CVE-2026-73464 has a CVSS score of 8.8, High severity, and enables root code execution through gNMI. CVE-2026-73454 has a CVSS score of 8.1, High severity, and lets crafted gNSI Credentialz requests grant accounts elevated privileges. CVE-2026-73461 has a CVSS score of 8.0, High severity, and causes gRPC OpenConfig requests to be authorized at the wrong privilege level.
Key Details
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- Low
- User Interaction
- None
- CWE Classification
- CWE-94