OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-73442

LOW · CVSS 3 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Arista EOS with VRRP enabled is vulnerable as it logs peer device VRRP authentication credentials in cleartext, allowing authenticated users with sufficient privileges to access these credentials through agent trace logs. This exposure could lead to unauthorized access to network segments utilizing VRRP, potentially compromising network security. Organizations using Arista EOS should prioritize addressing this vulnerability to safeguard their network configurations and prevent credential leakage.

CVE
CVE-2026-73442
Severity
LOW
CVSS
3
EPSS
0.21%

Original NVD Description

On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receiving forwarded log output) to obtain the peer device VRRP authentication credentials without having access to the network segment on which VRRP is running.