CVE-2026-73443 Other in EOS
An attacker on the same network segment can replay VRRP advertisements to prevent failover, causing a denial of service for hosts using the virtual gateway.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-73443?
CVE-2026-73443 is a medium-severity vulnerability in Arista Networks EOS, published on 16 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
On affected platforms running Arista EOS with VRRPv2 IP-AH authentication configured, an unauthenticated attacker within the same layer 2 network segment on which VRRP is running can capture a legitimate authenticated VRRP advertisement and replay it indefinitely. Replayed advertisements can be used to advertise stale VRRP state, for example to prevent a backup router from taking over the virtual gateway after the original master has gone down, resulting in a denial of service for hosts using the virtual gateway address.
Weakness: CWE-294
Which versions are affected by CVE-2026-73443?
How do I fix CVE-2026-73443?
No fix has been published for CVE-2026-73443 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-73443 being exploited?
There is no known exploitation of CVE-2026-73443 in the wild and no public exploit code.
Sources
Also known as GHSA-vq3p-3r98-j8w8.