Threat intelligence dashboard
CVE-2026-73467medium

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers

Risk score

6.0

CVSS 4.0

Vendor
Arista Networks
Product
EOS
CWE
CWE-532
Published
Sep 15, 2026
Updated
Sep 16, 2026
CISA KEV
Not flagged

Affected products and versions

EOS

Arista Networks

Version / rangeStatusType
4.36.0 to 4.36.1Faffectedcustom
4.35.0 to 4.35.4Maffectedcustom
4.34.0 to 4.34.7Maffectedcustom
0.0.0 to 4.33.9Maffectedcustom
0 to 4.32.0affectedcustom
0 to 4.31.0affectedcustom

Technical metrics

6.3

CVSS 3.1

Severity
medium
Source
Arista
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

6.0

CVSS 4.0

Severity
medium
Source
Arista
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H