Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

EOS — Vulnerabilities & Security Advisories 78

All 78 CVE vulnerabilities found in EOS, with AI-generated Chinese analysis, references, and POCs.

This vulnerability aggregation page documents known security defects in the EOS product line, categorized by specific weakness types and associated vendor advisories. The collection aggregates reported issues across the product's release history, covering the full timeframe from initial deployment through the latest patch cycles. Here you can track the vendor's advisory timeline, analyze the frequency and severity of specific flaw classes, and review the complete vulnerability history for EOS to identify recurring themes in code quality or update cadence.

Vendor: Arista Networks

CVE ID Title CVSS Severity Published
CVE-2026-73462 On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I CWE-125 6.5 Medium 2026-09-16
CVE-2026-73457 Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users. CWE-532 5.3 Medium 2026-09-16
CVE-2026-73456 Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch. CWE-94 10.0 Critical 2026-09-16
CVE-2026-73442 On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receiving for CWE-532 3.0 Low 2026-09-16
CVE-2026-73443 On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indef CWE-294 4.7 Medium 2026-09-16
CVE-2026-77190 Security Advisory 0177 CWE-20 6.5 Medium 2026-09-16
CVE-2026-73468 Security Advisory 0175 CWE-670 6.5 Medium 2026-09-16
CVE-2026-73440 Security Advisory 0178 CWE-212 4.2 Medium 2026-09-16
CVE-2026-73469 Security Advisory 0176 CWE-863 5.8 Medium 2026-09-16
CVE-2026-73453 Security Advisory 0174 CWE-94 10.0 Critical 2026-09-16
CVE-2026-73455 Security Advisory 0173 CWE-130 7.5 High 2026-09-16
CVE-2026-73438 Security Advisory 0172 CWE-617 5.3 Medium 2026-09-16
CVE-2026-73436 Security Advisory 0171 CWE-1284 6.5 Medium 2026-09-16
CVE-2026-73435 Security Advisory 0171 CWE-345 8.2 High 2026-09-16
CVE-2026-19640 Security Advisory 0170 CWE-863 4.2 Medium 2026-09-16
CVE-2026-73463 Security Advisory 0169 CWE-362 5.3 Medium 2026-09-16
CVE-2026-73445 Security Advisory 0167 CWE-20 4.9 Medium 2026-09-16
CVE-2026-2380 Security Advisory 0168 CWE-256 7.4 High 2026-09-16
CVE-2026-73464 Security Advisory 0166 CWE-94 8.8 High 2026-09-16
CVE-2026-73454 Security Advisory 0165 CWE-77 8.1 High 2026-09-16
CVE-2026-73439 Security Advisory 0164 CWE-842 7.5 High 2026-09-16
CVE-2026-73461 Security Advisory 0163 CWE-266 8.0 High 2026-09-16
CVE-2026-73447 Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request CWE-78 9.1 Critical 2026-09-16
CVE-2026-73450 Security Advisory 0161 CWE-345 6.9 Medium 2026-09-16
CVE-2026-73460 Security Advisory 0160 CWE-863 6.1 Medium 2026-09-15
CVE-2026-73459 Security Advisory 0160 CWE-354 7.4 High 2026-09-15
CVE-2026-73446 Security Advisory 0160 CWE-696 7.4 High 2026-09-15
CVE-2026-73444 On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the CWE-303 4.7 Medium 2026-09-15
CVE-2026-73437 On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper/destinat CWE-345 9.6 Critical 2026-09-15
CVE-2026-19655 On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent CWE-20 6.5 Medium 2026-09-15

All 78 known CVE vulnerabilities affecting EOS with full Chinese analysis, references, and POCs where available.