CVE-2026-73459
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss.
- Published Sep 16, 2026
- CVSS 7.0 high
- 0.2% chance of exploitation in the next 30 days (EPSS)