CVE-2026-73457

6.0 mediumEPSS 0.3%

Medium (6.0). EPSS 0.3% chance of exploitation in the next 30 days.

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, the gNPSI client credentials might be logged in clear text in local or remote accounting logs to authenticated users.

Severity

CVSS 4.0

6.0 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 24% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2026-09-16
Modified: 2026-09-17
Record from: the NVD, synced 2026-10-19

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158

Check your stack JSON