Security AffairsPierluigi Paganini
CISA flags Arista, Chrome, Cisco flaws; patch by June 23
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three significant vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These include:
1. **CVE-2026-7473**: A flaw in the Arista Extensible Operating System which may allow unauthorized traffic processing, leading to potential security bypass.
2. **CVE-2026-11645**: An out-of-bounds read/write vulnerability in Google Chromium's V8 engine, potentially allowing Denial of Service and remote code execution.
3. **CVE-2026-20245**: A privilege escalation issue in Cisco Catalyst SD-WAN Manager that enables local authenticated attackers to execute commands as root.
CISA mandates federal agencies to address these vulnerabilities by June 23, 2026, advising private organizations to also review these vulnerabilities.
AI summary of the original article from Security Affairs, written automatically by a language model. Quotes, figures and names come from that article; check it before relying on a detail. Read the original · How summaries are made
Story timeline CVE-2026-7473
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 9 Jun · 19:14 UTC | CISA | CISA confirms active exploitation of Arista EOS CVE-2026-7473 flaw |
| Tue 9 Jun · 20:13 UTC | CISA | CISA Adds Arista EOS Flaw to KEV Catalog, Urges Patch |
| Wed 10 Jun · 02:40 UTC | SecurityOnline | CISA warns of critical flaws in Chromium, Arista and Cisco gear |
| Wed 10 Jun · 06:49 UTC | SecurityWeek | Arista zero day EOS flaw exploited, CISA urges mitigation |
| Wed 10 Jun · 09:10 UTC | SecurityOnline | Architectural Exposure: Developers Extract Apple’s Subterranean Core Prompts for Siri AI |
| Wed 10 Jun · 09:11 UTC | SecurityOnline | Havoc Stager Uses Fake Invoices to Hit South American Firms |
| Wed 10 Jun · 11:28 UTC | Security Affairs | CISA flags Arista, Chrome, Cisco flaws; patch by June 23 (this article) |