Unicast Reverse Path Forwarding Vulnerability in Arista EOS
CVE-2026-73469

6.9MEDIUM

Key Information:

Vendor

Arista Networks

Status
Eos
Vendor
CVE Published:
16 September 2026

What is CVE-2026-73469?

A vulnerability exists in Arista EOS when deployed with a loose Unicast Reverse Path Forwarding (uRPF) configuration. This weakness can allow certain network traffic to bypass intended verification protocols, leading to potential mishandling of packets that should ordinarily be discarded. Such a flaw may result in unauthorized traffic being processed and forwarded by the affected device. Arista has stated that they are currently unaware of any exploitation of this issue within customer networks.

Affected Version(s)

EOS 7050X4 Series 4.35.0F <= 4.35.4M

References

https://www.arista.com/en/support/advisories-notices/secu...
vendor-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.