Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-73462 EUVD-2026-81010GHSA-m8c5-pmmq-7x3q

On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the I

Published Sep 16, 2026 · Updated Sep 17, 2026 · Assigned by Arista

Description

On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly. This results in a temporary disruption of multicast traffic management, which may cause multicast traffic to be flooded to all ports of the affected VLAN until the service recovers. Repeated exploitation could result in a prolonged loss of intended multicast forwarding behavior.

Affected products

VendorProductAffectedFixed
Arista Networks EOS 4.36.0 – ≤ 4.36.1F, 4.35.0 – ≤ 4.35.5M, 4.34.0 – ≤ 4.34.7.1M, 4.33.0 – ≤ 4.33.8M —

Advisories 1

References