Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-73451

EOS · Vulnerability

CVSS 3.1 4.8 MEDIUMCVSS 4.0 6.3 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-73451

Published

On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SVI) in shared mode, restarting of the secondary switchcard forwarding agent or insertion of secondary switchcard, can cause security ACLs on shared SVIs to stop functioning. This may result in incorrect packet permit/deny behavior. This issue was discovered internally by Arista, and the company is not aware of any malicious exploitation of this vulnerability in customer networks.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-73451

Published

EOS

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Arista Networks",
                    "product": "EOS",
                    "platforms": [
                        "755 Series",
                        "758 Series"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "4.36.0",
                            "lessThanOrEqual": "4.36.0.1F",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.35.0",
                            "lessThanOrEqual": "4.35.4M",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.34.0",
                            "lessThanOrEqual": "4.34.6M",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.33.0",
                            "lessThanOrEqual": "4.33.8M",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.32.0",
                            "lessThanOrEqual": "4.32.11M",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.31.1F",
                            "lessThanOrEqual": "4.31.10M",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON