Evil-DB LogoEvil-DB
← All CVEs

CVE-2026-7473

medium · 6.9Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Added 2026-06-09Remediation due 2026-06-23

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic. This issue has been reported as being exploited in the wild.

6.9
CVSS
1.1%
EPSS (exploit prob.)
64th
EPSS percentile
2026-06-05
Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-1023

Affected products

VendorProductAffected versions
aristaeosall versions
arista7020sr-24c2all versions
arista7020sr-32c2all versions
arista7020srg-24c2all versions
arista7020tr-48all versions
arista7020tra-48all versions
arista7280cr-48all versions
arista7280cr2-60all versions
arista7280cr2a-30all versions
arista7280cr2a-60all versions
arista7280cr2k-30all versions
arista7280cr2k-60all versions
arista7280cr2m-30all versions
arista7280cr3-32d4all versions
arista7280cr3-32p4all versions
arista7280cr3-36sall versions
arista7280cr3-96all versions
arista7280cr3a-24d12all versions
arista7280cr3a-48d6all versions
arista7280cr3a-72all versions
arista7280cr3ak-24d12all versions
arista7280cr3ak-48d6all versions
arista7280cr3ak-72all versions
arista7280cr3am-24d12all versions
arista7280cr3am-48d6all versions
arista7280cr3am-72all versions
arista7280cr3mk-32d4sall versions
arista7280cr3mk-32p4sall versions
arista7280dr3-24all versions
arista7280dr3a-36all versions
arista7280dr3a-54all versions
arista7280dr3ak-36all versions
arista7280dr3ak-54all versions
arista7280dr3am-36all versions
arista7280dr3am-54all versions
arista7280pr3-24all versions
arista7280qr-c36all versions
arista7280qr-c36-mall versions
arista7280qr-c72all versions
arista7280qra-c36sall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-7473