Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

EOS — Vulnerabilities & Security Advisories 78

All 78 CVE vulnerabilities found in EOS, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the EOS blockchain platform, specifically focusing on software flaws and cryptographic weaknesses identified by the vendor and the broader security community. The collection encompasses a wide spectrum of issues, including smart contract logic errors, consensus protocol failures, and node software defects, covering the entire timeline from the initial mainnet launch through the most recent patches and updates. Visitors can utilize this resource to track the chronological evolution of vendor advisories, gain a comprehensive understanding of specific weakness classes prevalent in distributed ledger technologies, or review the complete vulnerability history of the EOS ecosystem to assess long-term security posture. By centralizing these disparate reports, the page facilitates efficient analysis for security researchers, system administrators, and developers seeking to identify recurring patterns or critical exposure points without navigating multiple fragmented sources. The data presented here serves as a factual reference for risk assessment and remediation planning, ensuring that stakeholders remain informed about the current threat landscape affecting EOS infrastructure. All entries are curated to maintain accuracy and relevance, providing a clear view of how security challenges have been addressed over time while highlighting areas that may require continued vigilance or further investigation by the community.

Vendor: Arista Networks

CVE ID Title CVSS Severity Published
CVE-2026-73462 On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I CWE-125 6.5 Medium 2026-09-16
CVE-2026-73457 Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users. CWE-532 5.3 Medium 2026-09-16
CVE-2026-73456 Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch. CWE-94 10.0 Critical 2026-09-16
CVE-2026-73442 On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receiving for CWE-532 3.0 Low 2026-09-16
CVE-2026-73443 On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indef CWE-294 4.7 Medium 2026-09-16
CVE-2026-77190 Security Advisory 0177 CWE-20 6.5 Medium 2026-09-16
CVE-2026-73468 Security Advisory 0175 CWE-670 6.5 Medium 2026-09-16
CVE-2026-73440 Security Advisory 0178 CWE-212 4.2 Medium 2026-09-16
CVE-2026-73469 Security Advisory 0176 CWE-863 5.8 Medium 2026-09-16
CVE-2026-73453 Security Advisory 0174 CWE-94 10.0 Critical 2026-09-16
CVE-2026-73455 Security Advisory 0173 CWE-130 7.5 High 2026-09-16
CVE-2026-73438 Security Advisory 0172 CWE-617 5.3 Medium 2026-09-16
CVE-2026-73436 Security Advisory 0171 CWE-1284 6.5 Medium 2026-09-16
CVE-2026-73435 Security Advisory 0171 CWE-345 8.2 High 2026-09-16
CVE-2026-19640 Security Advisory 0170 CWE-863 4.2 Medium 2026-09-16
CVE-2026-73463 Security Advisory 0169 CWE-362 5.3 Medium 2026-09-16
CVE-2026-73445 Security Advisory 0167 CWE-20 4.9 Medium 2026-09-16
CVE-2026-2380 Security Advisory 0168 CWE-256 7.4 High 2026-09-16
CVE-2026-73464 Security Advisory 0166 CWE-94 8.8 High 2026-09-16
CVE-2026-73454 Security Advisory 0165 CWE-77 8.1 High 2026-09-16
CVE-2026-73439 Security Advisory 0164 CWE-842 7.5 High 2026-09-16
CVE-2026-73461 Security Advisory 0163 CWE-266 8.0 High 2026-09-16
CVE-2026-73447 Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request CWE-78 9.1 Critical 2026-09-16
CVE-2026-73450 Security Advisory 0161 CWE-345 6.9 Medium 2026-09-16
CVE-2026-73460 Security Advisory 0160 CWE-863 6.1 Medium 2026-09-15
CVE-2026-73459 Security Advisory 0160 CWE-354 7.4 High 2026-09-15
CVE-2026-73446 Security Advisory 0160 CWE-696 7.4 High 2026-09-15
CVE-2026-73444 On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the CWE-303 4.7 Medium 2026-09-15
CVE-2026-73437 On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay configured, an unauthenticated attacker with network access could send a crafted DHCP reply packet from an IP address that is not configured as a helper/destinat CWE-345 9.6 Critical 2026-09-15
CVE-2026-19655 On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent CWE-20 6.5 Medium 2026-09-15

All 78 known CVE vulnerabilities affecting EOS with full Chinese analysis, references, and POCs where available.