CVE-2026-73438 Security Advisory 0172

On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, an unauthenticated attacker on the same OSPFv3 broadcast domain can send a specially crafted set of packets that can cause the Ospf3 agent to restart unexpectedly. The crash results in the loss of...

CVE-2026-73438 Security Advisory 0172

On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, an unauthenticated attacker on the same OSPFv3 broadcast domain can send a specially crafted set of packets that can cause the Ospf3 agent to restart unexpectedly. The crash results in the loss of...

EUVD-2026-80586

On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, an unauthenticated attacker on the same OSPFv3 broadcast domain can send a specially crafted set of packets that can cause the Ospf3 agent to restart unexpectedly. The crash results in the loss of...

CVE-2026-73438

Arista EOS OSPFv3 vulnerability (CWE-617, Reachable Assertion ) allows an unauthenticated attacker on the same OSPFv3 broadcast domain to crash the Ospf3 agent with crafted packets, causing loss of all OSPFv3 adjacencies and potential routing disruption. Reported externally by Dravanet Inc. ; no ...

PT-2026-93410

Name of the Vulnerable Software and Affected Versions Arista EOS affected versions not specified Description An unauthenticated attacker on the same OSPFv3 broadcast domain can send a specially crafted set of packets to cause the Ospf3 agent to restart unexpectedly. This crash leads to the loss o...

CVE-2026-73438: Reachable Assertion

On affected platforms running Arista EOS with Open Shortest Path First version 3 OSPFv3 configured, an unauthenticated attacker on the same OSPFv3 broadcast domain can send a specially crafted set of packets that can cause the Ospf3 agent to restart unexpectedly. The crash results in the loss of...

Security Advisory 0172

Security Advisory 0172 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73438 CVSSv3.1 Base Score: 5.3...