Extensible Operating System vulnerabilities
1 published alerts for Arista Extensible Operating System.
Actively exploited (KEV)
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Arista Extensible Operating System is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2026-7473). Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. CISA remediation due date: 2026-06-23. PremierePC tracks KEV alerts for Upstate SC businesses — patch or open a ticket if you need help verifying exposure.