172 matches found
EUVD-2026-80066
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event...
EUVD-2026-80064
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
EUVD-2026-80065
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...
CVE-2026-73446
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
CVE-2026-73460
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event...
CVE-2026-73459
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...
CVE-2026-73459: Improper Validation of Integrity Check Value
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...
CVE-2026-73460: Incorrect Authorization
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event...
CVE-2026-73446: Incorrect Behavior Order
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
CVE-2026-73460 Security Advisory 0160
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event...
CVE-2026-73460 Security Advisory 0160
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event...
CVE-2026-73460
CVE-2026-73460 affects Arista EOS running with IS-IS graceful restart enabled. An unauthenticated attacker in the same Layer 2 domain can inject a malformed IS-IS LSP PDU, causing the graceful restart procedure to terminate prematurely and resulting in traffic loss after a restart event. The unde...
CVE-2026-73459
CVE-2026-73459 affects Arista EOS with IS-IS configured (versions 4.36.1F and below in the 4.36.x train). An unauthenticated attacker in the same Layer 2 domain can inject a specially crafted IS-IS LSP PDU, causing the legitimate LSP to be purged from the link-state database due to a checksum val...
CVE-2026-73459 Security Advisory 0160
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...
CVE-2026-73459 Security Advisory 0160
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...
CVE-2026-73446 Security Advisory 0160
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
CVE-2026-73446
CVE-2026-73446 affects Arista EOS on multiple hardware platforms (710, 720D, 720XP, 750X, 7010TX, 7020R, 7130, 7170, 7050X, 7060X, 7260X, 7280R, 7300X, 7320X, 7358X4, 7368X4, 7388X5, 7500R, 7800R, 7700R, AWE, CloudEOS, cEOS/vEOS-lab, CloudVision eXchange). When IS-IS is configured on a broadcast ...
CVE-2026-73446 Security Advisory 0160
On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit PDU that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP...
PT-2026-93224
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event...
PT-2026-93219
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss...