OCTOBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-73446

HIGH · CVSS 7.4 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Devices running Arista EOS with IS-IS configured on a broadcast interface are vulnerable to unauthenticated attacks that exploit crafted IS-IS Hello PDUs, leading to the teardown of established IS-IS adjacencies. This vulnerability can cause significant traffic disruption and loss of IP reachability for advertised prefixes. Network administrators and security teams managing affected Arista devices should prioritize remediation to mitigate potential service interruptions.

CVE
CVE-2026-73446
Severity
HIGH
CVSS
7.4
EPSS
0.27%

Original NVD Description

On affected platforms running Arista EOS with IS-IS configured on a broadcast interface, an unauthenticated attacker can send a crafted IS-IS Hello Protocol Data Unit (PDU) that causes the device to tear down an established IS-IS adjacency. This may result in traffic disruption and loss of IP reachability for prefixes advertised through that adjacency.