CVE-2026-73469 Security Advisory 0176
Attackers can bypass Unicast Reverse Path Forwarding checks on Arista EOS devices with loose configurations, allowing spoofed traffic to be forwarded.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-73469?
CVE-2026-73469 is a medium-severity vulnerability in Arista Networks EOS, published on 16 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration, certain traffic may not be subjected to the intended verification drop. Consequently, traffic that should be dropped based on these routes could still be processed and forwarded by the device.
This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.
Weakness: CWE-863
Which versions are affected by CVE-2026-73469?
How do I fix CVE-2026-73469?
No fix has been published for CVE-2026-73469 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-73469 being exploited?
There is no known exploitation of CVE-2026-73469 in the wild and no public exploit code.
Sources
Also known as GHSA-hggx-69g9-vfhx.