CVE-2026-73456

Critical10.0Published on September 16, 2026

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

CVSS score10.0 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-94

Vulnerabilities

Attackers Turn Network Management Consoles Into Gateways for Infrastructure-Wide Compromise

Attackers exploit Cisco FMC and ISE flaws for root access, credential theft and ransomware, turning consoles into infrastructure-wide gateways.

Sep 23, 202617:287 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Attackers Turn Network Management Consoles Into Gateways for Infrastructure-Wide Compromise