CVE-2026-73460 — Security Advisory 0160

CVE-2026-73460

Security Advisory 0160 PUBLISHED

Description (CNA)

On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event.

Affected (CNA)

Vendor / product	Versions
Arista Networks / EOS	affected 4.36.0 through 4.36.1F

CWE

CWE-863

References

https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.