Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2026-51575 CVE-2026-73460 · GHSA-7q68-g5wg-74r4

Incorrect authorization in Arista EOS

Priority LOW 30

On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate premat…

CVSS 4.0HIGH 7.0 Adjacent network No auth No interaction EPSS 0.00197 Published 2026-09-15 No fix listed CWE-863
Priority LOW 30

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-stat…

CVSS 4.0HIGH 7.0 Adjacent network No auth No interaction EPSS 0.00173 Published 2026-09-15 No fix listed CWE-354
Priority LOW 30

On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit (PDU) that causes the device to tear down an establis…

CVSS 4.0HIGH 7.0 Adjacent network No auth No interaction EPSS 0.00265 Published 2026-09-15 Fixed in 4.33.0F, 4.32.0F CWE-696