Lucene search
+L

CVE-2026-73444 On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the

🗓️ 15 Sep 2026 21:11:37Reported by AristaType 
cvelist
 cvelist
🔗 www.cve.org👁 8 Views

Unauthenticated VRRPv2 auth bypass in Arista EOS enabling traffic interception to virtual gateway.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
arista
Arista
Security Advisory 0148
2 Sep 202600:00
arista
arista
Arista
Security Advisory 0157
9 Sep 202600:00
arista
cve
CVE
CVE-2026-73444
15 Sep 202621:11
cve
euvd
EUVD
EUVD-2026-80009
16 Sep 202600:31
euvd
nvd
NVD
CVE-2026-73444
15 Sep 202622:16
nvd
ptsecurity
Positive Technologies
PT-2026-93176
15 Sep 202600:00
ptsecurity
[
  {
    "vendor": "Arista Networks",
    "product": "EOS",
    "platforms": [
      "710 Series",
      "720D Series",
      "720XP/722XPM Series",
      "750X Series",
      "7010TX Series",
      "7020R/R4 Series",
      "7130 Series running EOS",
      "7170 Series",
      "7050X3/X4 Series",
      "7060X/X2/X4/X5/X6 Series",
      "7260X/X3 Series",
      "7280R/R2/R3/R4 Series",
      "7300X/X3 Series",
      "7320X Series",
      "7358X4 Series",
      "7368X4 Series",
      "7388X5 Series",
      "7500R/R2/R3 Series",
      "7800R3/R4 Series",
      "7700R4 Series",
      "AWE 5000 Series",
      "AWE 7200R Series",
      "CloudEOS",
      "cEOS-lab",
      "vEOS-lab",
      "CloudVision eXchange",
      "virtual or physical appliance"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "4.36.0",
        "lessThanOrEqual": "4.36.1F",
        "changes": [
          {
            "at": "4.36.2F",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.35.0",
        "lessThanOrEqual": "4.35.5M",
        "changes": [
          {
            "at": "4.35.6M",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.34.0",
        "lessThanOrEqual": "4.34.7M",
        "changes": [
          {
            "at": "4.34.8M",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "4.33.0",
        "lessThanOrEqual": "4.33.9M",
        "changes": [
          {
            "at": "4.33.10M",
            "status": "unaffected"
          }
        ],
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation