
CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog, including an actively exploited Arista EOS flaw (CVE-2026-7473) that allows incorrect tunnel decapsulation. Arista will not patch the flaw, citing risks of breaking existing configurations, and instead recommends ACL-based mitigations. FCEB agencies must apply fixes by June 23, 2026.
Tap to vote and see what everyone thinks.