Is CVE-2026-73460 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-73460?

CVE-2026-73460 has a CVSS v3 severity of MEDIUM (6.1).

Back

CVE-2026-73460

Description

On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event.