ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-73445

Security Advisory 0167

CVSS 3.1 4.9 MEDIUMCVSS 4.0 6.9 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-73445

Published

On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may cause an incorrect Authz policy which was uploaded in the ongoing RPC stream to become active. This does not affect Bootz. This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-73445

Published

EOS

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Arista Networks",
                    "product": "EOS",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "4.36.0F",
                            "lessThanOrEqual": "4.36.0.1F",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "4.35.0F",
                            "lessThanOrEqual": "4.35.5M",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "4.34.0F",
                            "lessThanOrEqual": "4.34.7M",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "4.33.0F",
                            "lessThanOrEqual": "4.33.8M",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "4.32.0F",
                            "lessThan": "4.33.0F",
                            "status": "affected",
                            "versionType": "custom"
                        },
                        {
                            "version": "4.31.0F",
                            "lessThan": "4.32.0F",
                            "status": "affected",
                            "versionType": "custom"
                        }
                    ],
                    "platforms": [
                        "710 Series",
                        "720D Series",
                        "720XP/722XPM Series",
                        "750X Series",
                        "7010TX Series",
                        "7020R/R4 Series",
                        "7130 Series running EOS",
                        "7170 Series",
                        "7050X3/X4 Series",
                        "7060X/X2/X4/X5/X6 Series",
                        "7260X/X3 Series",
                        "7280R/R2/R3/R4 Series",
                        "7300X/X3 Series",
                        "7320X Series",
                        "7358X4 Series",
                        "7368X4 Series",
                        "7388X5 Series",
                        "7500R/R2/R3 Series",
                        "7800R3/R4 Series",
                        "7700R4 Series",
                        "AWE 5000 Series",
                        "AWE 7200R Series",
                        "CloudEOS",
                        "cEOS-lab",
                        "vEOS-lab"
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON