Threats Tagged 'ghsa-7q68-g5wg-74r4'

CVE-2026-73460 is an incorrect authorization vulnerability in Arista Networks EOS affecting versions 4.36.0 through 4.36.1F. It occurs when IS-IS graceful restart is enabled, allowing an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet to prematurely terminate the IS-IS graceful restart procedure. This can lead to traffic loss after a restart event. The vulnerability has a medium severity with a CVSS score of 6.1.