CVE-2026-73459

Description

On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss.

CVSS Vector

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160