by Kastro
Paper/Archive/CVE-2026-73456

CVE-2026-73456

Arista Networks EOS — Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

EPSS 0.7%CVSS 10.0
critical.is priorityof 100
41
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 53.0.530 × 2010.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

Affected

ProductAffectedFixed inSource
EOS4.36.0 – 4.36.1F–CNA
EOS4.35.0 – 4.35.5M–CNA
EOS4.34.2F – 4.34.7M–CNA

Scores by source

Arista (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Arista (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryarista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158