Threats Tagged 'ghsa-c355-4cc9-9547'

CVE-2026-73444 is a vulnerability in Arista Networks EOS affecting VRRPv2 IP Authentication Header (IP-AH) authentication. An unauthenticated attacker with access to the layer 2 network segment running VRRP can bypass authentication and assume the virtual router master role. This allows the attacker to intercept, modify, or discard traffic sent to the virtual gateway address. The vulnerability affects specific versions of EOS prior to fixed releases. The CVSS score is 4.7, indicating medium severity with a focus on availability impact.