CVE-2026-73437

Name of the Vulnerable Software and Affected Versions Arista EOS (affected versions not specified)

Description An unauthenticated attacker with network access can exploit a flaw in the Dynamic Host Configuration Protocol (DHCP) relay. By sending a crafted DHCP reply packet from an IP address not configured as a helper address, the relay agent forwards the packet to clients without validating the source. This allows the attacker to provide clients with malicious network configuration parameters, which may lead to traffic interception or denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.