CVE-2026-73456Disclosure

LOWCVSS 9.2 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interface (gNPSI) enabled, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-09-17); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-09-17: 2Mentions · 2026-09-22: 1Patch / Workaround · 2026-09-22: 1Technical Details · 2026-09-22: 109-1709-22
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-172
Disclosure1General1
2026-09-221
Patch1
Full discourse3 posts
  • ExploitGrid@exploitgrid
    Disclosure

    [CVE] CVE-2026-73456 [HIGH PRIORITY] #Under certain circumstances, an unauthenticated gNPSI client can craft a mali... 🔗 https://exploitgrid.net/cve/CVE-2026-73456

    Post summary

    The post announces CVE-2026-73456 with a brief, truncated description and a link to an external site for more information, indicating a disclosure-focused message.

    1000039
    48 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-20130 CVE-2026-20192 CVE-2026-70416 CVE-2026-73453 CVE-2026-73456 ..🧵👇

    Post summary

    The tweet lists several CVEs as top vulnerabilities of the day without providing details on PoC, exploits, patches, or active exploitation.

    1000067
    48 followersView on X
  • SecAlerts@SecAlertsCo
    Patch

    🌐 Arista EOS with gNPSI enabled is exposed to unauthenticated RCE. A crafted gRPC request grants full admin control over the switch. CVE-2026-73456, CVSS 9.2. Disable gNPSI or patch now. #cybersecurity #ciso #cto #vulnerabilities #msp https://secalerts.co/vulnerability/CVE-2026-73456?utm_campaign=x https://t.co/ExnSUceNWI

    Post summary

    The tweet discloses an unauthenticated RCE in Arista EOS when gNPSI is enabled, describing a crafted gRPC request that yields admin control (CVE-2026-73456, CVSS 9.2), and urges users to disable the feature or apply a patch.

    0000075
    890 followersView on X

Explore more