CVE-2026-73458— On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou
Quick assessment
Affected
Arista Networks EOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在配置了经过身份验证的双向转发检测（BFD）会话的受影响的平台上（运行 Arista EOS 的系统），一个经过精心构造的数据包可能会导致 BFD 会话中断。由于多种路由协议会监控 BFD 会话的状态，BFD 会话的中断可能导致不必要的网络变更（例如路由切换或链路状态变化）。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of ServiceAffected Version Matrix 4
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Arista Networks | EOS | 4.36.0≤ 4.36.1F |
affected |
4.35.0≤ 4.35.5M |
affected | ||
4.34.0≤ 4.34.7M |
affected | ||
4.33.0≤ 4.33.8M |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-73458
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou
Source: CVE Program / CVE List V5
Vulnerability Description
On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various routing protocols monitor status on BFD session(s).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
认证算法的不正确实现
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Arista Networks | EOS | 4.36.0 ~ 4.36.1F | - |
|
II. Public POCs for CVE-2026-73458
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-73458
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-73458 (1)
Same Patch Batch · Arista Networks · 2026-09-15 · 12 CVEs total
| CVE-2026-73437 | 9.6 CRITICAL | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) r |
| CVE-2026-73459 | 7.4 HIGH | Security Advisory 0160 |
| CVE-2026-73446 | 7.4 HIGH | Security Advisory 0160 |
| CVE-2026-19655 | 6.5 MEDIUM | On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) r |
| CVE-2026-73466 | 6.3 MEDIUM | On affected platforms running Arista EOS, under certain circumstances plaintext user passw |
| CVE-2026-73465 | 6.3 MEDIUM | On affected platforms running Arista EOS, under certain circumstances plaintext private ke |
| CVE-2026-73467 | 6.3 MEDIUM | On affected platforms running Arista EOS, under certain circumstances plaintext shared sec |
| CVE-2026-73460 | 6.1 MEDIUM | Security Advisory 0160 |
| CVE-2026-19641 | 5.3 MEDIUM | On affected platforms running Arista EOS with password authentication configured, a specia |
| CVE-2026-73451 | 4.8 MEDIUM | On affected platforms running Arista EOS with dual switch cards and with ingress Security |
| CVE-2026-73444 | 4.7 MEDIUM | On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) auth |
IV. Related Vulnerabilities
V. Comments for CVE-2026-73458
No comments yet