What’s Vulnerable › Products

Arista Networks EOS vulnerabilities

110 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 65 published in the last 12 months.

Check whether your Arista Networks EOS version is affected

Exploited Arista Networks EOS vulnerabilities

• CVE-2026-7473 — Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
• CVE-2014-7169 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
• CVE-2014-6271 — GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

Latest Arista Networks EOS vulnerabilities

• CVE-2026-73462 — On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I (CVSS 6.5)
• CVE-2026-73457 — Under certain circumstances, the gNPSI client credentials might be logged in clear text, in local or remote accounting logs to authenticated users. (CVSS 5.3)
• CVE-2026-73456 — Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch. (CVSS 10.0)
• CVE-2026-73443 — On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indef (CVSS 4.7)
• CVE-2026-73442 — On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials are logged in cleartext on the switch, allowing an authenticated user with sufficient privileges to view agent trace logs (or a system receiving for (CVSS 3.0)
• CVE-2026-77190 — Security Advisory 0177 (CVSS 6.5)
• CVE-2026-73469 — Security Advisory 0176 (CVSS 5.8)
• CVE-2026-73468 — Security Advisory 0175 (CVSS 6.5)
• CVE-2026-73455 — Security Advisory 0173 (CVSS 7.5)
• CVE-2026-73453 — Security Advisory 0174 (CVSS 10.0)
• CVE-2026-73440 — Security Advisory 0178 (CVSS 4.2)
• CVE-2026-73438 — Security Advisory 0172 (CVSS 5.3)
• CVE-2026-73436 — Security Advisory 0171 (CVSS 6.5)
• CVE-2026-73435 — Security Advisory 0171 (CVSS 8.2)
• CVE-2026-19640 — Security Advisory 0170 (CVSS 4.2)
• CVE-2026-73464 — Security Advisory 0166 (CVSS 8.8)
• CVE-2026-73463 — Security Advisory 0169 (CVSS 5.3)
• CVE-2026-73461 — Security Advisory 0163 (CVSS 8.0)
• CVE-2026-73454 — Security Advisory 0165 (CVSS 8.1)
• CVE-2026-73445 — Security Advisory 0167 (CVSS 4.9)
• CVE-2026-73439 — Security Advisory 0164 (CVSS 7.5)
• CVE-2026-2380 — Security Advisory 0168 (CVSS 7.4)
• CVE-2026-73447 — Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request (CVSS 9.1)
• CVE-2026-73450 — Security Advisory 0161 (CVSS 6.9)
• CVE-2026-73460 — Security Advisory 0160 (CVSS 6.1)