CVE-2026-7473

🗓️ 05 Jun 2026 16:22:47Reported by AristaType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 201 Views

Arista Extensible Operating System tunnel decapsulation flaw forwards unauthorized tunneled packets by decap IP.

Reporter	Title	Published	Views	Family All 16
GithubExploit	Exploit for Incomplete Comparison with Missing Factors in Arista Eos	10 Jun 202616:21	–	githubexploit
ATTACKERKB	CVE-2026-7473	5 Jun 202616:22	–	attackerkb
Arista	Security Advisory 0137	5 May 202600:00	–	arista
Tenable Nessus	Arista Networks EOS Tunnel Decapsulation Improper Validation (SA0137)	15 Jun 202600:00	–	nessus
Circl	CVE-2026-7473	9 Jun 202618:00	–	circl
CISA KEV Catalog	Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability	9 Jun 202600:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	9 Jun 202612:00	–	cisa
CNNVD	Arista EOS 安全漏洞	5 Jun 202600:00	–	cnnvd
Cvelist	CVE-2026-7473 Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass	5 Jun 202616:22	–	cvelist
EUVD	EUVD-2026-34858	5 Jun 202616:22	–	euvd

NVD

Node

arista eos

AND

arista 7020sr-24c2Match-

arista 7020sr-32c2Match-

arista 7020srg-24c2Match-

arista 7020tr-48Match-

arista 7020tra-48Match-

arista 7280cr-48Match-

arista 7280cr2-60Match-

arista 7280cr2a-30Match-

arista 7280cr2a-60Match-

arista 7280cr2k-30Match-

arista 7280cr2k-60Match-

arista 7280cr2m-30Match-

arista 7280cr3-32d4Match-

arista 7280cr3-32p4Match-

arista 7280cr3-36sMatch-

arista 7280cr3-96Match-

arista 7280cr3a-24d12Match-

arista 7280cr3a-48d6Match-

arista 7280cr3a-72Match-

arista 7280cr3ak-24d12Match-

arista 7280cr3ak-48d6Match-

arista 7280cr3ak-72Match-

arista 7280cr3am-24d12Match-

arista 7280cr3am-48d6Match-

arista 7280cr3am-72Match-

arista 7280cr3mk-32d4sMatch-

arista 7280cr3mk-32p4sMatch-

arista 7280dr3-24Match-

arista 7280dr3a-36Match-

arista 7280dr3a-54Match-

arista 7280dr3ak-36Match-

arista 7280dr3ak-54Match-

arista 7280dr3am-36Match-

arista 7280dr3am-54Match-

arista 7280pr3-24Match-

arista 7280qr-c36Match-

arista 7280qr-c36-mMatch-

arista 7280qr-c72Match-

arista 7280qra-c36sMatch-

arista 7280qra-c36smMatch-

arista 7280sr-48c6Match-

arista 7280sr2-48yc6Match-

arista 7280sr2-48yc6-mMatch-

arista 7280sr2a-48yc6Match-

arista 7280sr2a-48yc6-mMatch-

arista 7280sr2k-48c6-mMatch-

arista 7280sr3-40yc6Match-

arista 7280sr3-48yc8Match-

arista 7280sr3m-48yc8Match-

arista 7280sra-48c6Match-

arista 7280sra-48c6-mMatch-

arista 7280sram-48c6Match-

arista 7280srm-40cx2Match-

arista 7280tr-48c6Match-

arista 7280tr3-40c6Match-

arista 7280tra-48c6Match-

arista 7280tra-48c6-mMatch-

arista 7289r3a-scMatch-

arista 7289r3ak-scMatch-

arista 7289r3am-scMatch-

arista 7500r-36cq-lcMatch-

arista 7500r-36q-lcMatch-

arista 7500r-48s2cq-lcMatch-

arista 7500r-8cfpx-lcMatch-

arista 7500r2-36cq-lcMatch-

arista 7500r2a-36cq-lcMatch-

arista 7500r2ak-36cq-lcMatch-

arista 7500r2ak-48ycq-lcMatch-

arista 7500r2am-36cq-lcMatch-

arista 7500r2m-36cq-lcMatch-

arista 7500r3-24dMatch-

arista 7500r3-24pMatch-

arista 7500r3-36cqMatch-

arista 7500r3k-36cqMatch-

arista 7500r3k-48y4dMatch-

arista 7500rm-36cq-lcMatch-

arista 7504r-fmMatch-

arista 7504r3Match-

arista 7508r-fmMatch-

arista 7508r3Match-

arista 7512r-fmMatch-

arista 7512r3Match-

arista 7516-sup2Match-

arista 7516n-chMatch-

arista 7516r-fmMatch-

arista 7800r3-36dMatch-

arista 7800r3-48cqMatch-

arista 7800r3a-36dMatch-

arista 7800r3a-36dmMatch-

arista 7800r3a-36pMatch-

arista 7800r3a-36pmMatch-

arista 7800r3ak-36dmMatch-

arista 7800r3ak-36pmMatch-

arista 7800r3k-48cqMatch-

arista 7800r3k-48cqmsMatch-

arista 7800r3k-72yMatch-

arista 7804r3Match-

arista 7808r3Match-

arista 7812r3Match-

arista 7816lr3Match-

arista 7816r3Match-

[
  {
    "vendor": "Arista Networks",
    "product": "EOS",
    "platforms": [
      "7020R Series",
      "7280R/R2 Series",
      "7500R/R2 Series",
      "7280R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)",
      "7500R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)",
      "7800R3 Series (Limited exposure: IP-in-IPv6 and GUEv6)"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "4.36.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.35.0",
        "lessThanOrEqual": "4.35",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.34.0",
        "lessThanOrEqual": "4.34",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.33.0",
        "lessThanOrEqual": "4.33",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.32.0",
        "lessThanOrEqual": "4.32",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.31.0",
        "lessThanOrEqual": "4.31",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "*",
        "lessThanOrEqual": "4.30",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
arista	www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137
arista	www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 11:02Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.15.8

CVSS 46.9

EPSS0.00836

SSVC