CVE-2026-73444— On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the
Quick assessment
Affected
Arista Networks EOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在受影响的、运行 Arista EOS 且配置了 VRRPv2 IP 认证头（IP-AH）认证的平台上，一个未经认证的、能够访问 VRRP 所在二层网络段的攻击者，可以绕过 VRRP 认证并抢占虚拟路由器主角色，从而能够拦截、修改或丢弃该网络段内主机发往虚拟网关地址的数据包。
Possible ATT&CK Techniques 1 AI
T1040 · Network Sniffing
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-73444
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the
Source: CVE Program / CVE List V5
Vulnerability Description
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the virtual router master role, enabling the attacker to intercept, modify, or discard traffic that hosts on the segment send to the virtual gateway address.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
认证算法的不正确实现
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Arista Networks | EOS | 4.36.0 ~ 4.36.1F | - |
|
II. Public POCs for CVE-2026-73444
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-73444
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-73444 (1)
Same Patch Batch · Arista Networks · 2026-09-15 · 12 CVEs total
| CVE-2026-73437 | 9.6 CRITICAL | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) r |
| CVE-2026-73458 | 8.2 HIGH | On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detec |
| CVE-2026-73459 | 7.4 HIGH | Security Advisory 0160 |
| CVE-2026-73446 | 7.4 HIGH | Security Advisory 0160 |
| CVE-2026-19655 | 6.5 MEDIUM | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) r |
| CVE-2026-73466 | 6.3 MEDIUM | On affected platforms running Arista EOS, under certain circumstances plaintext user passw |
| CVE-2026-73465 | 6.3 MEDIUM | On affected platforms running Arista EOS, under certain circumstances plaintext private ke |
| CVE-2026-73467 | 6.3 MEDIUM | On affected platforms running Arista EOS, under certain circumstances plaintext shared sec |
| CVE-2026-73460 | 6.1 MEDIUM | Security Advisory 0160 |
| CVE-2026-19641 | 5.3 MEDIUM | On affected platforms running Arista EOS with password authentication configured, a specia |
| CVE-2026-73451 | 4.8 MEDIUM | On affected platforms running Arista EOS with dual switch cards and with ingress Security |
IV. Related Vulnerabilities
V. Comments for CVE-2026-73444
No comments yet