AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Arista NetworksCVE-2026-73467

Arista Networks EOS: secrets in logs

Arista Networks

CVE-2026-73467 · Published Sep 15, 2026 · updated Sep 16, 2026

Medium6.0
No fix yet
Arista Networks advisory

On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured Terminal Access Controller Access-Control System Plus (TACACS+) servers

Affected versions

PackageAffectedFixed in
EOS
Product
>= 4.36.0, <= 4.36.1FNo fix yet
>= 4.35.0, <= 4.35.4MNo fix yet
>= 4.34.0, <= 4.34.7MNo fix yet
>= 0.0.0, <= 4.33.9MNo fix yet
Details and references
CVSS 4.0
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-532

More Arista Networks advisories

All Arista Networks
Medium 6.5Sep 15Arista Networks EOS: denial of serviceCVE-2026-73437no fix yetMedium 5.3Sep 15On affected platforms running Arista EOS with VRRPv2 IP Authentication HeaderCVE-2026-73444no fix yetHigh 7.1Sep 15Arista Networks EOS: improper input validationCVE-2026-19655no fix yetCritical 9.2Sep 15On affected platforms running Arista EOS with authenticated Bidirectional...CVE-2026-73458no fix yetMedium 6.0Sep 15Arista Networks EOS: secrets in logsCVE-2026-73465no fix yetMedium 6.0Sep 15Arista Networks EOS: secrets in logsCVE-2026-73466no fix yet