CVE-2026-73454

8.6 highEPSS 0.4%

High (8.6). EPSS 0.4% chance of exploitation in the next 30 days.

On affected platforms running Arista EOS with gRPC Network Security Interface (gNSI) Credentialz configured, a specially crafted request can cause unintended modifications to the target account's properties. This may result in the account being assigned elevated privileges or access beyond what an administrator intended.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2026-09-16
Modified: 2026-09-17
Record from: the NVD, synced 2026-10-19

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24721-security-advisory-0165

Check your stack JSON