CISA
CISA Adds Arista EOS Flaw to KEV Catalog, Urges Patch
The Known Exploited Vulnerabilities (KEV) Catalog, maintained by CISA, serves as a comprehensive source for vulnerabilities actively exploited in the wild. Organizations are encouraged to use this catalog for prioritizing their vulnerability management efforts. The catalog includes detailed information about specific vulnerabilities, such as CVE-2026-7473 related to Arista's Extensible Operating System, which poses risks due to incomplete comparison handling of packet decapsulation.
It features actionable mitigation strategies, information on related Common Weakness Enumerations (CWE), and announcements for updates on newly added vulnerabilities. Users can subscribe for updates and access the catalog in various formats including CSV and JSON.
Story timeline CVE-2026-7473
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Tue 9 Jun · 19:14 UTC | CISA | CISA confirms active exploitation of Arista EOS CVE-2026-7473 flaw |
| Tue 9 Jun · 20:13 UTC | CISA | CISA Adds Arista EOS Flaw to KEV Catalog, Urges Patch (this article) |
| Wed 10 Jun · 02:40 UTC | SecurityOnline | CISA warns of critical flaws in Chromium, Arista and Cisco gear |
| Wed 10 Jun · 06:49 UTC | SecurityWeek | Arista zero day EOS flaw exploited, CISA urges mitigation |
| Wed 10 Jun · 09:10 UTC | SecurityOnline | Architectural Exposure: Developers Extract Apple’s Subterranean Core Prompts for Siri AI |
| Wed 10 Jun · 09:11 UTC | SecurityOnline | Havoc Stager Uses Fake Invoices to Hit South American Firms |
| Wed 10 Jun · 11:28 UTC | Security Affairs | CISA flags Arista, Chrome, Cisco flaws; patch by June 23 |