Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

EOS · Vulnerability

CVSS 3.1 6.5 MEDIUMCVSS 4.0 7.1 HIGHCheck source for fixed versionsKEV status unknown

cve-program · CVE-2026-73462

Published

On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly. This results in a temporary disruption of multicast traffic management, which may cause multicast traffic to be flooded to all ports of the affected VLAN until the service recovers. Repeated exploitation could result in a prolonged loss of intended multicast forwarding behavior.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-73462

Published

EOS

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Arista Networks",
                    "product": "EOS",
                    "platforms": [
                        "710 Series",
                        "720D Series",
                        "720XP/722XPM Series",
                        "750X Series",
                        "7010TX Series",
                        "7020R/R4 Series",
                        "7130 Series running EOS",
                        "7170 Series",
                        "7050X3/X4 Series",
                        "7060X/X2/X4/X5/X6 Series",
                        "7260X/X3 Series",
                        "7280R/R2/R3/R4 Series",
                        "7300X/X3 Series",
                        "7320X Series",
                        "7358X4 Series",
                        "7368X4 Series",
                        "7388X5 Series",
                        "7500R/R2/R3 Series",
                        "7800R3/R4 Series",
                        "7700R4 Series",
                        "AWE 5000 Series",
                        "AWE 7200R Series",
                        "CloudEOS",
                        "cEOS-lab",
                        "vEOS-lab",
                        "CloudVision eXchange",
                        "virtual or physical appliance"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "4.36.0",
                            "lessThanOrEqual": "4.36.1F",
                            "changes": [
                                {
                                    "at": "4.36.2F",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.35.0",
                            "lessThanOrEqual": "4.35.5M",
                            "changes": [
                                {
                                    "at": "4.35.6M",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.34.0",
                            "lessThanOrEqual": "4.34.7.1M",
                            "changes": [
                                {
                                    "at": "4.34.8M",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "4.33.0",
                            "lessThanOrEqual": "4.33.8M",
                            "changes": [
                                {
                                    "at": "4.33.9M",
                                    "status": "unaffected"
                                }
                            ],
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 06:58 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current