CVE-2026-73435CWE-345

CVE-2026-73435

High · published September 16, 2026

CVSS v3.1
8.2
EPSS
0%
Percentile
7.9
In the wild
Unconfirmed
What it is

On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafted OSPFv2 packet from an unauthenticated attacker on the same broadcast segment, with OSPFv2 authentication configured can cause adjacency flapping and packet loss. The disruption can affect routing across the broader OSPF domain.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
7.0 · CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00188 · 7.9th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2026-09-16T14:16Z
References (1)
https://www.arista.com/en/support/advisories-notices/security-advisory/24727-security-advisory-0171 · [email protected]
EPSS history
Timeline
  • 17 SEP 03:32Z
    EPSS moved — → 0%
    epss
  • 16 SEP 09:19Z
    Security Advisory 0171
    cvelistv5