Back to the CVE list
CVE-2026-7473 CISA KEV · Actively exploitedSuited to automated attack · CISA

Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

CVSS score

5.8

EPSS probability

%0.6

Risk score

0.1

Published

4 mo ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Mitigation available

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2026-7473 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic. This issue has been reported as being exploited in the wild.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2026-7473 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Arista NetworksEOS View
2aristaeos View
3arista7020sr-24c2 View
4arista7020sr-32c2 View
5arista7020srg-24c2 View
6arista7020tr-48 View
7arista7020tra-48 View
8arista7280cr-48 View
9arista7280cr2-60 View
10arista7280cr2a-30 View
11arista7280cr2a-60 View
12arista7280cr2k-30 View
13arista7280cr2k-60 View
14arista7280cr2m-30 View
15arista7280cr3-32d4 View
16arista7280cr3-32p4 View
17arista7280cr3-36s View
18arista7280cr3-96 View
19arista7280cr3a-24d12 View
20arista7280cr3a-48d6 View
21arista7280cr3a-72 View
22arista7280cr3ak-24d12 View
23arista7280cr3ak-48d6 View
24arista7280cr3ak-72 View
25arista7280cr3am-24d12 View
26arista7280cr3am-48d6 View
27arista7280cr3am-72 View
28arista7280cr3mk-32d4s View
29arista7280cr3mk-32p4s View
30arista7280dr3-24 View
31arista7280dr3a-36 View
32arista7280dr3a-54 View
33arista7280dr3ak-36 View
34arista7280dr3ak-54 View
35arista7280dr3am-36 View
36arista7280dr3am-54 View
37arista7280pr3-24 View
38arista7280qr-c36 View
39arista7280qr-c36-m View
40arista7280qr-c72 View
41arista7280qra-c36s View
42arista7280qra-c36sm View
43arista7280sr-48c6 View
44arista7280sr2-48yc6 View
45arista7280sr2-48yc6-m View
46arista7280sr2a-48yc6 View
47arista7280sr2a-48yc6-m View
48arista7280sr2k-48c6-m View
49arista7280sr3-40yc6 View
50arista7280sr3-48yc8 View
51arista7280sr3m-48yc8 View
52arista7280sra-48c6 View
53arista7280sra-48c6-m View
54arista7280sram-48c6 View
55arista7280srm-40cx2 View
56arista7280tr-48c6 View
57arista7280tr3-40c6 View
58arista7280tra-48c6 View
59arista7280tra-48c6-m View
60arista7289r3a-sc View
61arista7289r3ak-sc View
62arista7289r3am-sc View
63arista7500r-36cq-lc View
64arista7500r-36q-lc View
65arista7500r-48s2cq-lc View
66arista7500r-8cfpx-lc View
67arista7500r2-36cq-lc View
68arista7500r2a-36cq-lc View
69arista7500r2ak-36cq-lc View
70arista7500r2ak-48ycq-lc View
71arista7500r2am-36cq-lc View
72arista7500r2m-36cq-lc View
73arista7500r3-24d View
74arista7500r3-24p View
75arista7500r3-36cq View
76arista7500r3k-36cq View
77arista7500r3k-48y4d View
78arista7500rm-36cq-lc View
79arista7504r-fm View
80arista7504r3 View
81arista7508r-fm View
82arista7508r3 View
83arista7512r-fm View
84arista7512r3 View
85arista7516-sup2 View
86arista7516n-ch View
87arista7516r-fm View
88arista7800r3-36d View
89arista7800r3-48cq View
90arista7800r3a-36d View
91arista7800r3a-36dm View
92arista7800r3a-36p View
93arista7800r3a-36pm View
94arista7800r3ak-36dm View
95arista7800r3ak-36pm View
96arista7800r3k-48cq View
97arista7800r3k-48cqms View
98arista7800r3k-72y View
99arista7804r3 View
100arista7808r3 View
101arista7812r3 View
102arista7816lr3 View
103arista7816r3 View
104aristaExtensible Operating System View
Total affected vendors: 2|Products: 104

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.9CVSS V40MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD
6.9CVSS V4_0MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:NCVE CNA
5.8CVSS V31MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NNVD
5.8CVSS V3_1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:NCVE CNA

Patch and Remediation Guide

Solution & Remediation Advisory

Workaround

Resmî yama doğrulanamadı; geçici azaltım veya workaround mevcut.

canonical

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

This CVE is marked as actively exploited in the CISA KEV catalogue, but no verified, downloadable public PoC or Metasploit module has been found yet. Evidence of active exploitation does not mean that public exploit code exists.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2026-7473 is associated with the following CWEs:

CWE-1023: Common Weakness Enumeration Entry CWE-1023

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-7473 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://www.arista.com/en/support/advisories-notices/security-advisory/22872-security-advisory-0137vendor-advisoryhttps://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-7473nvdCISA Known Exploited Vulnerabilities Catalogkev

CVSS Vector Radar Chart

5.8 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityNone

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)None

Geçici çözüm

Resmî yama doğrulanamadı; geçici azaltım veya workaround mevcut.

Follow the vendor

AN
Arista Networks logo
Arista Networks
A
arista logo
arista

Weakness Type (CWE & CAPEC)

CWE-1023

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2026-7473"