CVE-2026-73440
Security Advisory 0178
On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An authenticated user who gains access to this sensitive information could leverage it to perform unauthorized read operations on SNMP tables or to send fraudulent trap notifications to the Network Management System (NMS). This issue was discovered internally by Arista, and the company is not aware of any malicious exploitation of this vulnerability in customer networks.
| CWE | CWE-212 |
| Vendor | arista networks |
| Product | eos |
| Published | Sep 16, 2026 |
| Last Updated | Sep 16, 2026 |
Get instant alerts for arista networks eos
Be the first to know when new medium vulnerabilities affecting arista networks eos are published — delivered to Slack, Telegram or Discord.
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N