Product by Arista Networks
Eos
90 known vulnerabilities in Eos (Arista Networks), 1 of them actively exploited (CISA KEV).
Key figures
90
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
15
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-7473 | Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass In CISA KEValso in 1 other product | 5.8 | |
| Critical | CVE-2024-27890 | Arista Networks EOS: Missing Authentication for Critical Function | 9.6 | |
| High | CVE-2024-27889 | Arista Edge Threat Management - Arista NG Firewall (NGFW): SQL Injection | 8.8 | |
| Critical | CVE-2026-73456 | Arista Networks EOS: Code Injection | 10.0 | |
| Critical | CVE-2026-73453 | Security Advisory 0174 | 10.0 | |
| Critical | CVE-2026-73447 | Security Advisory 0162 - gNSI Certz/Bootz OS Command Injection via Crafted Rotate Request | 9.1 | |
| High | CVE-2026-73464 | Security Advisory 0166 | 8.8 | |
| Critical | CVE-2021-28506 | Arista Networks EOS: Improper Authorization | 9.1 | |
| High | CVE-2026-73455 | Security Advisory 0173 | 7.5 | |
| Critical | CVE-2026-73461 | Security Advisory 0163 | 8.0 | |
| Critical | CVE-2026-73458 | Arista Networks EOS: Incorrect Implementation of Authentication Algorithm | 8.2 | |
| Critical | CVE-2026-86106 | Security Advisory 0179 | 9.6 | |
| High | CVE-2026-73454 | Security Advisory 0165 | 8.1 | |
| Critical | CVE-2026-73437 | Arista Networks EOS: Insufficient Verification of Data Authenticity | 9.6 | |
| High | CVE-2026-86107 | Security Advisory 0180 | 5.9 | |
| Medium | CVE-2026-19641 | Arista Networks EOS: Improper Encoding or Escaping of Output | 5.3 | |
| High | CVE-2026-73439 | Security Advisory 0164 | 7.5 | |
| Critical | CVE-2021-28500 | Arista EOS: Improper Authorization | 9.1 | |
| Critical | CVE-2024-27892 | Arista Networks EOS: Missing Authentication for Critical Function | 9.6 | |
| High | CVE-2025-8873 | Arista EOS Dataplane Denial of Service via Malformed IPsec Packet | 7.5 | |
| High | CVE-2026-73435 | Security Advisory 0171 | 8.2 | |
| Medium | CVE-2026-73445 | Security Advisory 0167 | 4.9 | |
| High | CVE-2025-5088 | Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session | 8.3 | |
| High | CVE-2026-73446 | Security Advisory 0160 | 7.4 | |
| High | CVE-2026-19655 | Arista Networks EOS: Improper Input Validation | 6.5 |