CVE Feed

    Dashboard / CVE / CVE-2026-7473

    CVE-2026-7473

    On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic. This issue has been reported as being exploited in the wild.

    Published:Jun 5, 2026
    Last Modified:Jun 9, 2026
    EPS:Jun 5, 2026
    EPSS Score:0.00029
    CVSS Score:5.8

    CISA Notification

    Description

    On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic. This issue has been reported as being exploited in the wild.

    Required Action:

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Notes:

    No extra notes provided.

    Due Date
    Jun 23, 2026
    80 days ago
    Alert Date
    Jun 9, 2026
    94 days ago

    Affected Products

    Vendor
    Arista
    Product
    7020sr-24c2
    Vendor
    Arista
    Product
    7020sr-32c2
    Vendor
    Arista
    Product
    7020srg-24c2
    Vendor
    Arista
    Product
    7020tr-48
    Vendor
    Arista
    Product
    7020tra-48
    Vendor
    Arista
    Product
    7280cr-48
    Vendor
    Arista
    Product
    7280cr2-60
    Vendor
    Arista
    Product
    7280cr2a-30
    Vendor
    Arista
    Product
    7280cr2a-60
    Vendor
    Arista
    Product
    7280cr2k-30
    Vendor
    Arista
    Product
    7280cr2k-60
    Vendor
    Arista
    Product
    7280cr2m-30
    Vendor
    Arista
    Product
    7280cr3-32d4
    Vendor
    Arista
    Product
    7280cr3-32p4
    Vendor
    Arista
    Product
    7280cr3-36s
    Vendor
    Arista
    Product
    7280cr3-96
    Vendor
    Arista
    Product
    7280cr3a-24d12
    Vendor
    Arista
    Product
    7280cr3a-48d6
    Vendor
    Arista
    Product
    7280cr3a-72
    Vendor
    Arista
    Product
    7280cr3ak-24d12
    Vendor
    Arista
    Product
    7280cr3ak-48d6
    Vendor
    Arista
    Product
    7280cr3ak-72
    Vendor
    Arista
    Product
    7280cr3am-24d12
    Vendor
    Arista
    Product
    7280cr3am-48d6
    Vendor
    Arista
    Product
    7280cr3am-72
    Vendor
    Arista
    Product
    7280cr3mk-32d4s
    Vendor
    Arista
    Product
    7280cr3mk-32p4s
    Vendor
    Arista
    Product
    7280dr3-24
    Vendor
    Arista
    Product
    7280dr3a-36
    Vendor
    Arista
    Product
    7280dr3a-54
    Vendor
    Arista
    Product
    7280dr3ak-36
    Vendor
    Arista
    Product
    7280dr3ak-54
    Vendor
    Arista
    Product
    7280dr3am-36
    Vendor
    Arista
    Product
    7280dr3am-54
    Vendor
    Arista
    Product
    7280pr3-24
    Vendor
    Arista
    Product
    7280qr-c36
    Vendor
    Arista
    Product
    7280qr-c36-m
    Vendor
    Arista
    Product
    7280qr-c72
    Vendor
    Arista
    Product
    7280qra-c36s
    Vendor
    Arista
    Product
    7280qra-c36sm
    Vendor
    Arista
    Product
    7280sr-48c6
    Vendor
    Arista
    Product
    7280sr2-48yc6
    Vendor
    Arista
    Product
    7280sr2-48yc6-m
    Vendor
    Arista
    Product
    7280sr2a-48yc6
    Vendor
    Arista
    Product
    7280sr2a-48yc6-m
    Vendor
    Arista
    Product
    7280sr2k-48c6-m
    Vendor
    Arista
    Product
    7280sr3-40yc6
    Vendor
    Arista
    Product
    7280sr3-48yc8
    Vendor
    Arista
    Product
    7280sr3m-48yc8
    Vendor
    Arista
    Product
    7280sra-48c6
    Vendor
    Arista
    Product
    7280sra-48c6-m
    Vendor
    Arista
    Product
    7280sram-48c6
    Vendor
    Arista
    Product
    7280srm-40cx2
    Vendor
    Arista
    Product
    7280tr-48c6
    Vendor
    Arista
    Product
    7280tr3-40c6
    Vendor
    Arista
    Product
    7280tra-48c6
    Vendor
    Arista
    Product
    7280tra-48c6-m
    Vendor
    Arista
    Product
    7289r3a-sc
    Vendor
    Arista
    Product
    7289r3ak-sc
    Vendor
    Arista
    Product
    7289r3am-sc
    Vendor
    Arista
    Product
    7500r-36cq-lc
    Vendor
    Arista
    Product
    7500r-36q-lc
    Vendor
    Arista
    Product
    7500r-48s2cq-lc
    Vendor
    Arista
    Product
    7500r-8cfpx-lc
    Vendor
    Arista
    Product
    7500r2-36cq-lc
    Vendor
    Arista
    Product
    7500r2a-36cq-lc
    Vendor
    Arista
    Product
    7500r2ak-36cq-lc
    Vendor
    Arista
    Product
    7500r2ak-48ycq-lc
    Vendor
    Arista
    Product
    7500r2am-36cq-lc
    Vendor
    Arista
    Product
    7500r2m-36cq-lc
    Vendor
    Arista
    Product
    7500r3-24d
    Vendor
    Arista
    Product
    7500r3-24p
    Vendor
    Arista
    Product
    7500r3-36cq
    Vendor
    Arista
    Product
    7500r3k-36cq
    Vendor
    Arista
    Product
    7500r3k-48y4d
    Vendor
    Arista
    Product
    7500rm-36cq-lc
    Vendor
    Arista
    Product
    7504r-fm
    Vendor
    Arista
    Product
    7504r3
    Vendor
    Arista
    Product
    7508r-fm
    Vendor
    Arista
    Product
    7508r3
    Vendor
    Arista
    Product
    7512r-fm
    Vendor
    Arista
    Product
    7512r3
    Vendor
    Arista
    Product
    7516-sup2
    Vendor
    Arista
    Product
    7516n-ch
    Vendor
    Arista
    Product
    7516r-fm
    Vendor
    Arista
    Product
    7800r3-36d
    Vendor
    Arista
    Product
    7800r3-48cq
    Vendor
    Arista
    Product
    7800r3a-36d
    Vendor
    Arista
    Product
    7800r3a-36dm
    Vendor
    Arista
    Product
    7800r3a-36p
    Vendor
    Arista
    Product
    7800r3a-36pm
    Vendor
    Arista
    Product
    7800r3ak-36dm
    Vendor
    Arista
    Product
    7800r3ak-36pm
    Vendor
    Arista
    Product
    7800r3k-48cq
    Vendor
    Arista
    Product
    7800r3k-48cqms
    Vendor
    Arista
    Product
    7800r3k-72y
    Vendor
    Arista
    Product
    7804r3
    Vendor
    Arista
    Product
    7808r3
    Vendor
    Arista
    Product
    7812r3
    Vendor
    Arista
    Product
    7816lr3
    Vendor
    Arista
    Product
    7816r3
    Vendor
    Arista
    Product
    Eos

    Exploits

    https://github.com/fevar54/CVE-2026-7473---Arista-EOS-Tunnel-Decapsulation-Bypass

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High