EO
Product
EOS
On CISA KEVExploited in the wild
66
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 14Medium 38Low 7
Watch
Add EOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73464 | 8.8 | Sep 16 | On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management In Affected: 4.29.0F before 4.30.0F; 4.30.0F before 4.31.0F; 4.31.0F before 4.32.0F; 4.32.0F before 4.33.0F; 4.33.0F through 4.33.8M; 4.34.0F through 4.34.7M; +2 more |
| CVE-2026-73435 | 8.2 | Sep 16 | On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on the same broadcast segment, Affected: 4.36.0F through 4.36.1F; 4.35.0F through 4.35.5M; 4.34.0F through 4.34.7M; 4.33.0F through 4.33.9M; 1.0.0 before 4.33.0F |
| CVE-2026-73458 | 8.2 | Sep 15 | On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou Affected: 4.36.0 through 4.36.1F; 4.35.0 through 4.35.5M; 4.34.0 through 4.34.7M; 4.33.0 through 4.33.8M |
| CVE-2026-73454 | 8.1 | Sep 16 | On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a specially crafted request can cause unintended modifications to the target account's prop Affected: 4.30.0F before 4.31.0F; 4.31.0F before 4.32.0F; 4.32.0F before 4.33.0F; 4.33.0F through 4.33.8M; 4.34.0F through 4.34.7M; 4.35.0F through 4.35.5M; +1 more |
| CVE-2026-73461 | 8.0 | Sep 16 | On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorizatio Affected: 4.29.0F before 4.30.0F; 4.30.0F before 4.31.0F; 4.31.0F before 4.32.0F; 4.32.0F through 4.32.11M; 4.33.0F through 4.33.8M; 4.34.0F through 4.34.7M; +2 more |
| CVE-2025-1259 | 7.7 | Mar 4 | On affected platforms running Arista EOS with OpenConfig configured, a gNOI request can be run when it should have been rejected. Affected: 4.33.0 through 4.33.1; 4.32.0 through 4.32.3; 4.31.0 through 4.31.5; 4.30.0 through 4.30.8; 4.29.0 through 4.29.9; 4.28.0 through 4.28.12 |
| CVE-2026-73455 | 7.5 | Sep 16 | On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause the OSPFv3 agent to restart unexpectedly. Affected: 1.0.0 before 4.33.0F; 4.33.0F through 4.33.8M; 4.34.0F through 4.34.6M; 4.35.0F through 4.35.4M; 4.36.0F through 4.36.0.1F |
| CVE-2026-73439 | 7.5 | Sep 16 | On affected platforms running Arista EOS, if OpenConfig is configured and running a gNMI server on the system, and if gNSI Pathz is configured and a gNSI Pathz policy is present on the system, then gN Affected: 4.33.2F through 4.33.8M; 4.34.0F through 4.34.6M; 4.35.0F through 4.35.5M; 4.36.0F through 4.36.0.1F |
| CVE-2025-8873 | 7.5 | Jun 4 | Arista EOS Dataplane Denial of Service via Malformed IPsec Packet Affected: 4.33.0M through 4.33.4M; 4.32.0M through 4.32.6.1M; 4.31.0M through 4.31.7.1M; 4.30.0M through 4.30.10M; 4.29.0M through 4.29.10.1M |
| CVE-2025-6188 | 7.5 | Aug 25 | On affected platforms running Arista EOS, maliciously formed UDP packets with source port 3503 may be accepted by EOS. UDP Port 3503 is associated with LspPing Echo Reply. This can result in unexpected behaviors, especially for UDP based services that do n Affected: 4.33.0 through 4.33.1F; 4.33.1.0 through 4.33.1.2F; 4.32.4.0 through 4.32.4.1M; 4.31.0 through 4.31.6M; 4.30.0 through 4.30.9.1M |
| CVE-2024-9448 | 7.5 | May 8 | On affected platforms running Arista EOS with Traffic Policies configured the vulnerability will cause received untagged packets not to hit Traffic Policy rules that they are expected to hit. If the rule was to drop the packet, the packet will not be dropp Affected: 4.33.0 through 4.33.0F; 4.32.0 through 4.32.3M; 4.31.0 through 4.31.5M; 4.30.0 through 4.30.8M |
| CVE-2026-2380 | 7.4 | Sep 16 | On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and responses may be unintentionally logged Affected: 4.36.0F through 4.36.1F; 4.35.0F before 4.36.0F; 4.34.0F before 4.35.0F; 4.33.0F before 4.34.0F; before 4.33.0F |
| CVE-2026-73459 | 7.4 | Sep 15 | On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from Affected: 4.36.0 through 4.36.1F |
| CVE-2026-73446 | 7.4 | Sep 15 | On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit (PDU) that causes the device to t Affected: 4.36.0 through 4.36.1F; 4.35.0 through 4.35.5M; 4.34.0 through 4.34.7.1M; 4.33.0 through 4.33.9M; 4.32.0 before 4.33.0F; 4.31.0 before 4.32.0F |
Showing 14