Known Exploited Vulnerabilities June 09, 2026 · CISA KEV Catalog

CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Arista CVE-2026-7473
Related: CVE-2026-114625: Arista Velo Cloud Orchestrator SQL Injection Vulnerability Known Exploited Vulnerabilities · Oct 23, 2026
CVE-2026-93952: Arista Velo Cloud Orchestrator Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Sep 22, 2026
CVE-2026-16812: Arista Velo Cloud Orchestrator On-Prem OS Command Injection Vulnerability Known Exploited Vulnerabilities · Jul 27, 2026