CVE-2026-73440

4.2 MEDIUM

Published 2026-09-16 · Updated 2026-09-16

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

On affected platforms running Arista EOS with Simple Network Management Protocol (SNMP) configured, SNMPv3 local or remote user credentials may be exposed as a one-way hashed, localized key value within the device's running and sanitized configurations. An authenticated user who gains access to this sensitive information could leverage it to perform unauthorized read operations on SNMP tables or to send fraudulent trap notifications to the Network Management System (NMS). This issue was discovered internally by Arista, and the company is not aware of any malicious exploitation of this vulnerability in customer networks.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses

CWE-212

All references

https://www.arista.com/en/support/advisories-notices/security-advisory/24734-security-advisory-0178

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-90860

Related by shared AI tags and CWE weakness class. Browse the full archive.