CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation

Summary: CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on Tuesday, including an Arista EOS flaw, CVE-2026-7473, in which switches with tunnel decapsulation configurations such as VXLAN, decap-groups, or GRE interfaces fail to verify the tunnel protocol type and forward unexpected tunneled packets whose destination IP matches the configured decapsulation IP. Arista said the defect mainly affects 7020R, 7280R/R2, and 7500R/R2 series products, that it has been reported as exploited in the wild, and that no patches are planned because fixes could break existing configurations, so it recommends ACLs on upstream devices or on the devices performing the unexpected decapsulation.
Key Takeaway: A network vendor has confirmed in-the-wild exploitation and declined to ship a patch, leaving mitigation to ACLs that must be applied correctly on the right devices. Federal Civilian Executive Branch agencies have until June 23, 2026, to apply fixes or mitigations for the three vulnerabilities.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-7473
Related: CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Known Exploited Vulnerabilities · Jun 09, 2026
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026