CVE-2026-73464

HighCVSS 8.8/10Last modified Sep 17, 2026

Description

On affected platforms running Arista EOS with gRPC Network Management Interface (gNMI) enabled, a specially crafted request could allow a malicious authenticated client with gRPC Network Management Interface (gNMI) access to execute arbitrary code with root privileges on the switch.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Arista Networks	EOS	>= 4.29.0F, < 4.30.0F; >= 4.30.0F, < 4.31.0F; >= 4.31.0F, < 4.32.0F; >= 4.32.0F, < 4.33.0F; >= 4.33.0F, <= 4.33.8M; >= 4.34.0F, <= 4.34.7M; >= 4.35.0F, <= 4.35.5M; >= 4.36.0F, <= 4.36.0.1F

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24722-security-advisory-0166

Timeline

Published: Sep 16, 2026
Last modified: Sep 17, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-734656.3On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files durin CVE-2026-734666.3On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear text to log files during opera CVE-2026-734676.3On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Acc CVE-2026-734686.5A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in tem CVE-2026-734695.8When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration, certain traffic may not be s CVE-2026-73478.1Use after free in Chromoting in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code via malicious netw CVE-2026-734709.8Improper Privilege Management vulnerability in Apache Syncope. Delegations can be created or updated with Roles not owned by the delega CVE-2026-734716.1A flaw was found in GStreamer gst-plugins-good (avidemux). In the Nikon metadata tag parser, a pointer can be dereferenced without verifying CVE-2026-734726.1A flaw was found in GStreamer gst-plugins-good (avidemux). In the superindex and subindex parsers, integer overflow can bypass bounds checks CVE-2026-734735.5A flaw was found in GStreamer gst-plugins-good (avidemux). In the subindex parser, missing validation of the entry count can cause excessive CVE-2026-734745.3Server-Side Request Forgery (SSRF) vulnerability in Drupal Entity Share Websub allows Server Side Request Forgery. This issue affects Entity CVE-2026-734759.1Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from