CVE-2026-73461
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Security Advisory 0163
On affected EOS platforms with AAA-based gRPC authorization enabled for OpenConfig, gRPC requests of an authenticated user to OpenConfig may use the wrong privilege level, resulting in an authorization using the wrong AAA method list. This does not impact non-gRPC OpenConfig requests such as NETCONF.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EOS
- Vendor
- Arista Networks
- Product
- EOS
- Platforms
- 710 Series
- 720D Series
- 720XP/722XPM Series
- 750X Series
- 7010TX Series
- 7020R/R4 Series
- 7130 Series (EOS)
- 7170 Series
- 7050X3/X4 Series
- 7060X/X2/X4/X5/X6 Series
- 7260X/X3 Series
- 7280R/R2/R3/R4 Series
- 7300X/X3 Series
- 7320X Series
- 7358X4 Series
- 7368X4 Series
- 7388X5 Series
- 7500R/R2/R3 Series
- 7800R3/R4 Series
- 7700R4 Series
- AWE 5000 Series
- AWE 7200R Series
- CloudEOS
- cEOS-lab
- vEOS-lab
- CloudVision eXchange
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.29.0F | affected | custom | 4.30.0F | Unavailable | None listed |
| 4.30.0F | affected | custom | 4.31.0F | Unavailable | None listed |
| 4.31.0F | affected | custom | 4.32.0F | Unavailable | None listed |
| 4.32.0F | affected | custom | Unavailable | 4.32.11M | None listed |
| 4.33.0F | affected | custom | Unavailable | 4.33.8M | None listed |
| 4.34.0F | affected | custom | Unavailable | 4.34.7M | None listed |
| 4.35.0F | affected | custom | Unavailable | 4.35.5M | None listed |
| 4.36.0F | affected | custom | Unavailable | 4.36.0.1F | None listed |