Zero Day MonitorZDM

← Back to list

8.2

CVE-2026-73458PATCHED

arista · eos

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou

Description

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various routing protocols monitor status on BFD session(s).

Affected Products

Vendor	Product	Versions
arista	eos	4.36.0, 4.35.0, 4.34.0, 4.33.0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
arista	eos	cert_advisory	90%

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24710-security-advisory-0154(vendor-advisory)

Related News (2 articles)

Tier B

BSI Advisories6d ago

[NEU] [hoch] Arista EOS: Mehrere Schwachstellen

→ No new info (linked only)

Tier C

VulDB6d ago

CVE-2026-73458 | Arista EOS up to 4.33.8M/4.34.7M/4.35.5M/4.36.1F Bidirectional Forwarding Detection resource consumption

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.2 HIGH

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

https://www.arista.com/en/support/advisories-notices/security-advisory/24710-security-advisory-0154

CWECWE-303

PublishedSep 15, 2026

Trending Score24

Source articles2

Independent2

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

CRITICALCVE-2026-93952EXPKEV

Security Advisory 0183

CRITICALCVE-2026-73456

Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

CRITICALCVE-2026-73453

Security Advisory 0174

MEDIUMCVE-2026-19641

On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation of this issue can exhaust available authentication resources, resulting in legit

HIGHCVE-2026-73464

Security Advisory 0166

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 15, 2026

Discovered by ZDM

Sep 15, 2026

Patch Available

Sep 15, 2026