CVE-2026-73444
On affected platforms running Arista EOS with VRRPv2 IP Authentication Header (IP-AH) authentication configured, an unauthenticated attacker with access to the layer 2 network segment on which VRRP is running could bypass VRRP authentication and claim the
CVSS score
4.7
EPSS probability
%0.3
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
10.0
CVE-2026-93952 Actively exploited
Security Advisory 0183
AN
WorkaroundEPSS %1
7.2
CVE-2026-102160
Security Advisory 0190
AN
Patch status unknownEPSS %1
5.8
CVE-2026-7473 Actively exploited
Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass
AN
WorkaroundEPSS %1
10.0
CVE-2026-73456
Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.
AN
Patch status unknownEPSS %1
10.0
CVE-2026-73453
Security Advisory 0174
AN
Patch status unknownEPSS %1
9.1
CVE-2026-73447
Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request
AN
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-73444"