CVE-2026-73445CWE-20
CVE-2026-73445
Medium · published September 16, 2026
What it is
On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may cause an incorrect Authz policy which was uploaded in the ongoing RPC stream to become active. This does not affect Bootz.
This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.
The record
Technical detail
- CVSS v3.1
- 4.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- CVSS v4.0
- 6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS
- 0.00350 · 27.4th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2026-09-16T13:17Z
References (1)
EPSS history
Timeline
17 SEP 03:32Z
EPSS moved — → 0%
epss
16 SEP 08:58Z
Security Advisory 0167
cvelistv5