CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-06-05
Arista EOS Tunnel Decapsulation Protocol Validation Vulnerability (CVE-2026-7473) Advisory
[Affected Scope] Arista EOS-based switches configured with tunnel decapsulation such as VXLAN, decap-groups, or GRE tunnel interfaces
[Impact] Attackers can bypass security boundaries by sending unexpected tunneled packets, which the switch incorrectly decapsulates and forwards. This vulnerability is actively exploited in the wild
[Mitigation] Apply the latest EOS security patches from Arista or implement inbound Access Control Lists (ACLs) to restrict unauthorized tunnel traffic