CVE-2026-73460
On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event.
- Published Sep 16, 2026
- CVSS 7.0 high
- 0.2% chance of exploitation in the next 30 days (EPSS)