CVE-2026-73458

CVSS 9.2 (critical) · published 2026-09-15

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various routing protocols monitor status on BFD session(s).

Weakness: CWE-303

Source: NVD CVE-2026-73458

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24710-security-advisory-0154

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.