CVE-2026-73456 — Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code ex…

CVE-2026-73456

Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch. PUBLISHED

Description (CNA)

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

Affected (CNA)

Vendor / product	Versions
Arista Networks / EOS	affected 4.36.0 through 4.36.1F; affected 4.35.0 through 4.35.5M; affected 4.34.2F through 4.34.7M

CWE

CWE-94

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24714-security-advisory-0158

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.