Threats tagged 'ghsa-7g93-8r7h-w6jj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	10.0	EPSS 0.7%	CVE-2026-73456Arista Networks EOS · Code Injection Critical10.0EPSS 0.7%2026-09-16CVE Database V5CVE-2026-73456 CVE-2026-73456 is a critical vulnerability in Arista Networks EOS affecting versions 4.34.2F through 4.34.7M, 4.35.0 through 4.35.5M, and 4.36.0 through 4.36.1F. It involves improper control of code generation (CWE-94) in the gRPC Network Packet Sampling Interface (gNPSI). An unauthenticated attacker can exploit this flaw to execute arbitrary code, gaining full administrative control over the affected switch. EPSS 0.7%Vulnerability CWE-94 #ghsa-7g93-8r7h-w6jj	CVE Database V5	2026-09-16

Page 1 of 1