CYBERHAWK / CVE / CVE-2026-7473
CVE-2026-7473
Extensible Operating System
ACTIVELY EXPLOITED (KEV)
other
The flaw
Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configure
What to do
Review advisory and patch per vendor guidance.
References
In the news
- CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active ExploitationThe Hacker News · 2026-06-10
- No Patch Planned for Exploited Arista EOS VulnerabilitySecurityWeek · 2026-06-10
- CISA: Cisco, Chrome and Arista vulnerabilities in the KEV ListSecNews.gr · 2026-06-11