Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-86107 | medium | 5.9 | No | The VeloCloud Edge and Gateway exhibit an out-of-bounds write vulnerability when processing tunneled IP fragments between authenticated over... | 2026-09-16 |
| CVE-2026-73455 | high | 7.5 | No | On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can cause t... | 2026-09-16 |
| CVE-2026-73435 | high | 8.2 | No | On affected platforms running Arista EOS with Open Shortest Path First version 2 (OSPFv2) configured, a specially crafted OSPFv2 packet from... | 2026-09-16 |
| CVE-2026-73445 | medium | 4.9 | No | On affected platforms running Arista EOS, an issue with the gRPC Network Security Interface (gNSI) Authz Rotate RPC may cause an incorrect A... | 2026-09-16 |
| CVE-2026-2380 | high | 7.4 | No | On affected platforms running Arista EOS with OpenConfig-related services (i.e., gNMI, gNSI, RESTCONF and NETCONF), sensitive requests and r... | 2026-09-16 |
| CVE-2026-73467 | medium | 6.3 | No | On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Acc... | 2026-09-16 |
| CVE-2026-77190 | medium | 6.5 | No | On affected platforms running Arista EOS, an unauthenticated attacker who is network-adjacent to the switch and able to connect to a device... | 2026-09-16 |
| CVE-2026-73469 | medium | 5.8 | No | When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding (uRPF) configuration, certain traffic may not be s... | 2026-09-16 |
| CVE-2026-73468 | medium | 6.5 | No | A specially crafted packet can cause the premature expiry of multicast forwarding state on affected interfaces, potentially resulting in tem... | 2026-09-16 |
| CVE-2026-73440 | medium | 4.2 | No | On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials... | 2026-09-16 |
| CVE-2026-73436 | medium | 6.5 | No | On affected platforms running Arista EOS with OSPFv2 and OSPFv2 segment routing configured, a specially crafted OSPFv2 packet from an adjace... | 2026-09-16 |
| CVE-2026-19640 | medium | 4.2 | No | On affected platforms running Arista EOS, an authenticated user with access to the gNMI (gRPC Network Management Interface) may receive inco... | 2026-09-16 |
| CVE-2026-73463 | medium | 5.3 | No | On affected platforms running Arista EOS, when multiple gRPC Network Security Interface (gNSI) transports are configured, a race condition i... | 2026-09-16 |
| CVE-2026-73458 | high | 8.2 | No | On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafte... | 2026-09-16 |
| CVE-2026-73451 | medium | 4.8 | No | On affected platforms running Arista EOS with dual switch cards and with ingress Security ACLs configured on Switched Virtual Interfaces (SV... | 2026-09-16 |
| CVE-2026-19641 | medium | 5.3 | No | On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authenticat... | 2026-09-16 |
| CVE-2026-73449 | medium | 5.9 | No | On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured with dynamic authoriza... | 2026-09-16 |
| CVE-2026-84397 | medium | 5.4 | No | Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker... | 2026-09-16 |
| CVE-2026-69921 | high | 7.8 | No | Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. | 2026-09-16 |
| CVE-2026-92406 | high | 7.3 | No | A vulnerability was detected in SourceCodester Inventory and Monitoring System 1.0. The impacted element is an unknown function of the file... | 2026-09-16 |