CVE-2026-73453Disclosure

LOWCVSS 9.5 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution under certain conditions on affected platforms running Arista EOS configured with P4Runtime. P4Runtime is disabled by default in Arista EOS. By crafting a malicious packet during the initiation of a P4Runtime session, an attacker can obtain complete administrative control over the compromised switch. This issue was discovered internally by Arista, and the company is not aware of any malicious exploitation of this vulnerability in customer networks.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 4 mentions (2026-09-17); latest day: 1
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01234Mentions · 2026-09-17: 4Mentions · 2026-09-22: 1Patch / Workaround · 2026-09-22: 1Technical Details · 2026-09-17: 1Technical Details · 2026-09-22: 109-1709-22
Signal classification3 categories
Disclosure
360.0%
General
120.0%
Patch
120.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-09-174
Disclosure3General1
2026-09-221
Patch1
Full discourse5 posts
  • ExploitGrid@exploitgrid
    Disclosure

    [CVE] CVE-2026-73453 [HIGH PRIORITY] #Security Advisory 0174 🔗 https://exploitgrid.net/cve/CVE-2026-73453

    Post summary

    The text is a brief advisory announcement of CVE-2026-73453 marked as high priority with a link to an external CVE page, but provides no technical details, exploit information, or remediation guidance.

    1000037
    48 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-20130 CVE-2026-20192 CVE-2026-70416 CVE-2026-73453 CVE-2026-73456 ..🧵👇

    Post summary

    The tweet lists CVE identifiers (CVE-2026-20130, CVE-2026-20192, etc.) as part of a daily threat digest, but provides no PoC, exploit details, or remediation information.

    1000067
    48 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    🔌 Arista EOS CVE-2026-73453 (CVSS 9.5): under certain conditions, an unauthenticated P4Runtime client can achieve RCE. No auth or interaction required. Review Advisory 0174 now. #cybersecurity #ciso #cto #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-73453?utm_campaign=x https://t.co/SjlCsdC6pJ

    Post summary

    The tweet discloses CVE‑2026‑73453 (CVSS 9.5) as an unauthenticated RCE via P4Runtime and directs readers to Advisory 0174 for a patch, indicating a remediation is available.

    0000070
    890 followersView on X
  • Cybersecurity News DE@cybsecuritynews
    Disclosure

    Update: Arista EOS: Kritische Lücke in P4Runtime erlaubt vollständige Übernahme von Switches https://cybersecurity-news.de/arista-eos-cve-2026-73453-p4runtime-switch-uebernahme

    Post summary

    The post announces a critical vulnerability (CVE-2026-73453) in Arista EOS P4Runtime that enables full switch takeover, linking to a news article for further details without mentioning patches, exploits, or active exploitation.

    0000027
    12 followersView on X
  • Cybersecurity News DE@cybsecuritynews
    Disclosure

    #schwachstellen Arista EOS: Kritische Lücke in P4Runtime erlaubt vollständige Übernahme von Switches #arista #cve202673453 #eos #p4runtime https://cybersecurity-news.de/arista-eos-cve-2026-73453-p4runtime-switch-uebernahme

    Post summary

    The tweet announces a critical vulnerability in Arista EOS's P4Runtime (CVE-2026-73453) that allows complete takeover of switches, without providing further technical details or remediation.

    0000027
    12 followersView on X

Explore more