Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Security Advisory 0166

CVSS 3.1 8.8 HIGHCVSS 4.0 8.7 HIGHCheck source for fixed versionsKEV status unknown

cve-program · CVE-2026-73464

Published

On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management Interface (gNMI) access to execute arbitrary code with root privileges on the switch.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-73464

Published

EOS

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Arista Networks",
                    "product": "EOS",
                    "platforms": [
                        "710 Series",
                        "720D Series",
                        "720XP/722XPM Series",
                        "750X Series",
                        "7010TX Series",
                        "7020R/R4 Series",
                        "7130 Series (EOS)",
                        "7170 Series",
                        "7050X3/X4 Series",
                        "7060X/X2/X4/X5/X6 Series",
                        "7260X/X3 Series",
                        "7280R/R2/R3/R4 Series",
                        "7300X/X3 Series",
                        "7320X Series",
                        "7358X4 Series",
                        "7368X4 Series",
                        "7388X5 Series",
                        "7500R/R2/R3 Series",
                        "7800R3/R4 Series",
                        "7700R4 Series",
                        "AWE 5000 Series",
                        "AWE 7200R Series",
                        "CloudEOS",
                        "cEOS-lab",
                        "vEOS-lab",
                        "CloudVision eXchange, virtual or physical appliance"
                    ],
                    "versions": [
                        {
                            "version": "4.29.0F",
                            "status": "affected",
                            "versionType": "custom",
                            "lessThan": "4.30.0F"
                        },
                        {
                            "version": "4.30.0F",
                            "status": "affected",
                            "versionType": "custom",
                            "lessThan": "4.31.0F"
                        },
                        {
                            "version": "4.31.0F",
                            "status": "affected",
                            "versionType": "custom",
                            "lessThan": "4.32.0F"
                        },
                        {
                            "version": "4.32.0F",
                            "status": "affected",
                            "versionType": "custom",
                            "lessThan": "4.33.0F"
                        },
                        {
                            "version": "4.33.0F",
                            "status": "affected",
                            "versionType": "custom",
                            "lessThanOrEqual": "4.33.8M"
                        },
                        {
                            "version": "4.34.0F",
                            "status": "affected",
                            "versionType": "custom",
                            "lessThanOrEqual": "4.34.7M"
                        },
                        {
                            "version": "4.35.0F",
                            "status": "affected",
                            "versionType": "custom",
                            "lessThanOrEqual": "4.35.5M"
                        },
                        {
                            "version": "4.36.0F",
                            "status": "affected",
                            "versionType": "custom",
                            "lessThanOrEqual": "4.36.0.1F"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 13 Nov 09:00 UTC · 274 of 275 readable · 272 fully read · documentation 469/469 current