Evidence dossier

CVE-2026-7473

Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

56.3–74.1Priority evidence range

As known Jul 19, 2026, 5:00 AM UTCgen-56ccdaf9

Normalized restatement

On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. This occurs because the switch does not verify the tunnel protocol type, potentially leading to the unexpected processing of non-configured tunnel traffic. This issue has been reported as being exploited in the wild.

State: PUBLISHED
Published: Jun 5, 2026
Updated: Jun 10, 2026
Evidence coverage: 72%

CISA KEVCatalog member

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

FIRST EPSS0.84%

2026-07-18 · v2026.06.15 · percentile 53.6%

Source stateConflict visible

Distinct CVSS assessments remain side by side; none are averaged.

Source comparison

Who said what

Aristaoriginal assertion

container

Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

Jul 19, 2026Original evidence ↗

CISA-ADPindependent enrichment

container

CISA ADP Vulnrichment

Jul 19, 2026Original evidence ↗

CISA KEVoriginal assertion

observed_exploitation

Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

Jul 19, 2026Original evidence ↗

FIRST EPSSoriginal assertion

model_probability

Probability 0.008360000000; percentile 0.536490000000

Jul 19, 2026Original evidence ↗

Applicability

Cited product scope

Trace impact →

Arista NetworksEOS

[{"status": "affected", "version": "4.36.0", "versionType": "custom"}, {"status": "affected", "version": "4.35.0", "versionType": "custom", "lessThanOrEqual": "4.35"}, {"status": "affected", "version": "4.34.0", "versionType": "custom", "lessThanOrEqual": "4.34"}, {"status": "affected", "version": "4.33.0", "versionType": "custom", "lessThanOrEqual": "4.33"}, {"status": "affected", "version": "4.32.0", "versionType": "custom", "lessThanOrEqual": "4.32"}, {"status": "affected", "version": "4.31.0", "versionType": "custom", "lessThanOrEqual": "4.31"}, {"status": "affected", "version": "*", "versionType": "custom", "lessThanOrEqual": "4.30"}]

unknown

Unknown vendorUnknown product

cpe:2.3:h:arista:7020sr-24c2:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7020sr-32c2:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7020srg-24c2:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7020tr-48:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7020tra-48:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr2-60:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr2a-30:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr2a-60:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr2k-30:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr2k-60:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr2m-30:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3-32d4:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3-32p4:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3-36s:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3-96:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3a-24d12:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3a-48d6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3a-72:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3ak-24d12:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3ak-48d6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3ak-72:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3am-24d12:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3am-48d6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3am-72:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3mk-32d4s:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr3mk-32p4s:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280cr-48:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280dr3-24:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280dr3a-36:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280dr3a-54:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280dr3ak-36:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280dr3ak-54:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280dr3am-36:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280dr3am-54:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280pr3-24:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280qra-c36s:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280qra-c36sm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280qr-c36:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280qr-c36-m:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280qr-c72:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr2-48yc6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr2-48yc6-m:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr2a-48yc6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr2a-48yc6-m:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr2k-48c6-m:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr3-40yc6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr3-48yc8:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr3m-48yc8:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sr-48c6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sra-48c6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sra-48c6-m:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280sram-48c6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280srm-40cx2:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280tr3-40c6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280tr-48c6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280tra-48c6:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7280tra-48c6-m:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7289r3ak-sc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7289r3am-sc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7289r3a-sc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r2-36cq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r2a-36cq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r2ak-36cq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r2ak-48ycq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r2am-36cq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r2m-36cq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r3-24d:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r3-24p:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r3-36cq:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r-36cq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r-36q-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r3k-36cq:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r3k-48y4d:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r-48s2cq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500r-8cfpx-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7500rm-36cq-lc:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7504r3:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7504r-fm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7508r3:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7508r-fm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7512r3:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7512r-fm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7516n-ch:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7516r-fm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7516-sup2:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3-36d:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3-48cq:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3a-36d:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3a-36dm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3a-36p:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3a-36pm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3ak-36dm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3ak-36pm:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3k-48cq:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3k-48cqms:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7800r3k-72y:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7804r3:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7808r3:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7812r3:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7816lr3:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:h:arista:7816r3:-:*:*:*:*:*:*:*constrained

Unknown vendorUnknown product

cpe:2.3:o:arista:eos:*:*:*:*:*:*:*:*supported

Assessments

CVSS by origin

6.9

psirt@arista.comCVSS 4.0 · role Secondary

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

5.8

psirt@arista.comCVSS 3.1 · role SecondaryCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

6.9

AristaCVSS 4.0 · role unknownCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

5.8

AristaCVSS 3.1 · role unknownCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Limitations and unknowns

KEV membership is authoritative for the catalog, not proof of exposure in any environment.
EPSS is a dated model probability and not an individual-environment prediction.
Affected or fixed status applies only to the exact cited product and version scope; unresolved scope remains unknown.
NVD-carried upstream facts remain derivative and are not independent corroboration.
Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
Factor D is unknown in Public Core because no accepted canonical mapping-obligation ledger is present.
Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.