CVE-2026-73456
Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.
- Published Sep 16, 2026
- CVSS 9.2 critical
- 0.7% chance of exploitation in the next 30 days (EPSS)