OCTOBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-73459

HIGH · CVSS 7.4 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Arista EOS platforms configured with IS-IS are vulnerable to an unauthenticated attack that allows an adversary to inject a specially crafted IS-IS LSP PDU, leading to the unintended purging of legitimate LSPs from the link-state database. This vulnerability can result in significant traffic loss, impacting network reliability and performance. Network administrators and security teams managing affected Arista EOS deployments should prioritize remediation to mitigate potential disruptions.

CVE
CVE-2026-73459
Severity
HIGH
CVSS
7.4
EPSS
0.17%

Original NVD Description

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss.