OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-73464

HIGH · CVSS 8.8 EPSS 0.64%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Arista EOS systems with the gRPC Network Management Interface (gNMI) enabled are vulnerable to a high-severity flaw that allows authenticated clients to send specially crafted requests, potentially leading to arbitrary code execution with root privileges on the switch. This vulnerability poses a significant risk to network integrity and security, making it critical for organizations utilizing Arista EOS to prioritize patching and mitigation efforts. Network administrators and security teams should assess their environments for this issue to prevent exploitation.

CVE
CVE-2026-73464
Severity
HIGH
CVSS
8.8
EPSS
0.64%

Original NVD Description

On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management Interface (gNMI) access to execute arbitrary code with root privileges on the switch.