CVE-2026-73459 (GCVE-0-2026-73459)
Vulnerability from cvelistv5
Published
2026-09-15 23:16
Modified
2026-09-16 19:34
Severity ?
7.4 (High) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
7.0 (High) - CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
CWE
  • CWE-354 - Improper Validation of Integrity Check Value
Summary
On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss.
References
Impacted products
Vendor Product Version
Arista Networks EOS Version: 4.36.0   <
Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-73459",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-16T19:34:28.975379Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-16T19:34:44.583Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "EOS",
          "vendor": "Arista Networks",
          "versions": [
            {
              "lessThanOrEqual": "4.36.1F",
              "status": "affected",
              "version": "4.36.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eIn order to be vulnerable to CVE-2026-73459, the following condition must be met: \u003cbr\u003e\u003cbr\u003eIS-IS should be configured.\u003c/p\u003e\u003cpre\u003eswitch# show isis summary\nIS-IS Instance: 1 VRF: default\n\u0026nbsp;\u0026nbsp;Instance ID: 0\n\u0026nbsp;\u0026nbsp;System ID: 1111.1111.1001, administratively enabled\n\u0026nbsp;\u0026nbsp;Router ID: IPv4: 0.0.0.0\n\u0026nbsp;\u0026nbsp;Multi Topology disabled, not attached\n\u0026nbsp;\u0026nbsp;IPv4 Preference: Level 1: 115, Level 2: 115\n\u0026nbsp;\u0026nbsp;IPv6 Preference: Level 1: 115, Level 2: 115\n\u0026nbsp;\u0026nbsp;IS-Type: Level 1 and 2, Number active interfaces: 1\n\u0026nbsp;\u0026nbsp;Routes both IPv4 and IPv6\n\u0026nbsp;\u0026nbsp;LSP size maximum: Level 1: 1492, Level 2: 1492\n\u0026nbsp;\u0026nbsp;Interval Type \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; Max Wait Initial Wait Hold Interval\n\u0026nbsp;\u0026nbsp;----------------------- -------- ------------ -------------\n\u0026nbsp;\u0026nbsp;LSP generation interval\u0026nbsp; \u0026nbsp; \u0026nbsp; 5 s\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; 50 ms \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; 50 ms\n\u0026nbsp;\u0026nbsp;SPF interval\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; 30000 ms \u0026nbsp; \u0026nbsp; \u0026nbsp; 300 ms \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; 80 ms\n\u0026nbsp;\u0026nbsp;Current SPF hold interval(ms): Level 1: 80, Level 2: 80\n\u0026nbsp;\u0026nbsp;Last Level 1 SPF run 9 seconds ago\n\u0026nbsp;\u0026nbsp;Last Level 2 SPF run 9 seconds ago\n\u0026nbsp;\u0026nbsp;CSNP generation interval: 10 seconds\n\u0026nbsp;\u0026nbsp;Dynamic Flooding: Disabled\n\u0026nbsp;\u0026nbsp;Authentication mode: Level 1: None, Level 2: None\n\u0026nbsp;\u0026nbsp;Graceful Restart: Disabled, Graceful Restart Helper: Enabled\n\u0026nbsp;\u0026nbsp;Area addresses: 40\n\u0026nbsp;\u0026nbsp;level 1: number DIS interfaces: 0, LSDB size: 1\n\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;Area Leader: None\n\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;Overload Bit is not set.\u0026nbsp;\n\u0026nbsp;\u0026nbsp;level 2: number DIS interfaces: 0, LSDB size: 1\n\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;Area Leader: None\n\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;Overload Bit is not set.\u0026nbsp;\n\u0026nbsp;\u0026nbsp;Redistributed Level 1 routes: 0 limit: Not Configured\n\u0026nbsp;\u0026nbsp;Redistributed Level 2 routes: 0 limit: Not Configured\u003c/pre\u003e\u003cp\u003eIf IS-IS is not configured, there is no exposure to this issue.\u003cbr\u003e\u003c/p\u003e\u003cpre\u003eswitch#show isis summary\nswitch#\u0026nbsp;\u003c/pre\u003e"
            }
          ],
          "value": "In order to be vulnerable to CVE-2026-73459, the following condition must be met: \n\nIS-IS should be configured.\n\n\n\nswitch# show isis summary\nIS-IS Instance: 1 VRF: default\n\u00a0\u00a0Instance ID: 0\n\u00a0\u00a0System ID: 1111.1111.1001, administratively enabled\n\u00a0\u00a0Router ID: IPv4: 0.0.0.0\n\u00a0\u00a0Multi Topology disabled, not attached\n\u00a0\u00a0IPv4 Preference: Level 1: 115, Level 2: 115\n\u00a0\u00a0IPv6 Preference: Level 1: 115, Level 2: 115\n\u00a0\u00a0IS-Type: Level 1 and 2, Number active interfaces: 1\n\u00a0\u00a0Routes both IPv4 and IPv6\n\u00a0\u00a0LSP size maximum: Level 1: 1492, Level 2: 1492\n\u00a0\u00a0Interval Type \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 Max Wait Initial Wait Hold Interval\n\u00a0\u00a0----------------------- -------- ------------ -------------\n\u00a0\u00a0LSP generation interval\u00a0 \u00a0 \u00a0 5 s\u00a0 \u00a0 \u00a0 \u00a0 50 ms \u00a0 \u00a0 \u00a0 \u00a0 50 ms\n\u00a0\u00a0SPF interval\u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 30000 ms \u00a0 \u00a0 \u00a0 300 ms \u00a0 \u00a0 \u00a0 \u00a0 80 ms\n\u00a0\u00a0Current SPF hold interval(ms): Level 1: 80, Level 2: 80\n\u00a0\u00a0Last Level 1 SPF run 9 seconds ago\n\u00a0\u00a0Last Level 2 SPF run 9 seconds ago\n\u00a0\u00a0CSNP generation interval: 10 seconds\n\u00a0\u00a0Dynamic Flooding: Disabled\n\u00a0\u00a0Authentication mode: Level 1: None, Level 2: None\n\u00a0\u00a0Graceful Restart: Disabled, Graceful Restart Helper: Enabled\n\u00a0\u00a0Area addresses: 40\n\u00a0\u00a0level 1: number DIS interfaces: 0, LSDB size: 1\n\u00a0\u00a0\u00a0\u00a0Area Leader: None\n\u00a0\u00a0\u00a0\u00a0Overload Bit is not set.\u00a0\n\u00a0\u00a0level 2: number DIS interfaces: 0, LSDB size: 1\n\u00a0\u00a0\u00a0\u00a0Area Leader: None\n\u00a0\u00a0\u00a0\u00a0Overload Bit is not set.\u00a0\n\u00a0\u00a0Redistributed Level 1 routes: 0 limit: Not Configured\n\u00a0\u00a0Redistributed Level 2 routes: 0 limit: Not Configured\n\n\n\nIf IS-IS is not configured, there is no exposure to this issue.\n\n\n\n\nswitch#show isis summary\nswitch#"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "This issue was discovered internally by Arista and the company is not aware of any malicious uses of these issues in customer networks."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eOn affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss.\u003c/p\u003e"
            }
          ],
          "value": "On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-272",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-272 Protocol Manipulation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-354",
              "description": "CWE-354: Improper Validation of Integrity Check Value",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-15T23:16:27.270Z",
        "orgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
        "shortName": "Arista"
      },
      "references": [
        {
          "name": "Security Advisory 0160",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe recommended resolution is to upgrade to a fixed software version.\u003c/p\u003e"
            }
          ],
          "value": "The recommended resolution is to upgrade to a fixed software version."
        }
      ],
      "source": {
        "advisory": "0160",
        "defects": [
          "BUG1840507"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "Security Advisory 0160",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo workaround is available for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No workaround is available for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7",
    "assignerShortName": "Arista",
    "cveId": "CVE-2026-73459",
    "datePublished": "2026-09-15T23:16:27.270Z",
    "dateReserved": "2026-08-12T16:45:03.511Z",
    "dateUpdated": "2026-09-16T19:34:44.583Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-73459\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-16T19:34:28.975379Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-16T19:34:41.330Z\"}}], \"cna\": {\"title\": \"Security Advisory 0160\", \"source\": {\"defects\": [\"BUG1840507\"], \"advisory\": \"0160\", \"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"This issue was discovered internally by Arista and the company is not aware of any malicious uses of these issues in customer networks.\"}], \"impacts\": [{\"capecId\": \"CAPEC-272\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-272 Protocol Manipulation\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 7.4, \"attackVector\": \"ADJACENT_NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}, {\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 7, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"ADJACENT\", \"baseSeverity\": \"HIGH\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"PRESENT\", \"privilegesRequired\": \"NONE\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"NONE\", \"subAvailabilityImpact\": \"HIGH\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"NONE\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Arista Networks\", \"product\": \"EOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"4.36.0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"4.36.1F\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"The recommended resolution is to upgrade to a fixed software version.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eThe recommended resolution is to upgrade to a fixed software version.\u003c/p\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.arista.com/en/support/advisories-notices/security-advisory/24716-security-advisory-0160\", \"name\": \"Security Advisory 0160\", \"tags\": [\"vendor-advisory\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"No workaround is available for this issue.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eNo workaround is available for this issue.\u003c/p\u003e\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.5\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eOn affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a specially crafted IS-IS LSP PDU can cause the legitimate LSP to be unexpectedly purged from the IS-IS link-state database. This may result in traffic loss.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-354\", \"description\": \"CWE-354: Improper Validation of Integrity Check Value\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"In order to be vulnerable to CVE-2026-73459, the following condition must be met: \\n\\nIS-IS should be configured.\\n\\n\\n\\nswitch# show isis summary\\nIS-IS Instance: 1 VRF: default\\n\\u00a0\\u00a0Instance ID: 0\\n\\u00a0\\u00a0System ID: 1111.1111.1001, administratively enabled\\n\\u00a0\\u00a0Router ID: IPv4: 0.0.0.0\\n\\u00a0\\u00a0Multi Topology disabled, not attached\\n\\u00a0\\u00a0IPv4 Preference: Level 1: 115, Level 2: 115\\n\\u00a0\\u00a0IPv6 Preference: Level 1: 115, Level 2: 115\\n\\u00a0\\u00a0IS-Type: Level 1 and 2, Number active interfaces: 1\\n\\u00a0\\u00a0Routes both IPv4 and IPv6\\n\\u00a0\\u00a0LSP size maximum: Level 1: 1492, Level 2: 1492\\n\\u00a0\\u00a0Interval Type \\u00a0 \\u00a0 \\u00a0 \\u00a0 \\u00a0 Max Wait Initial Wait Hold Interval\\n\\u00a0\\u00a0----------------------- -------- ------------ -------------\\n\\u00a0\\u00a0LSP generation interval\\u00a0 \\u00a0 \\u00a0 5 s\\u00a0 \\u00a0 \\u00a0 \\u00a0 50 ms \\u00a0 \\u00a0 \\u00a0 \\u00a0 50 ms\\n\\u00a0\\u00a0SPF interval\\u00a0 \\u00a0 \\u00a0 \\u00a0 \\u00a0 \\u00a0 30000 ms \\u00a0 \\u00a0 \\u00a0 300 ms \\u00a0 \\u00a0 \\u00a0 \\u00a0 80 ms\\n\\u00a0\\u00a0Current SPF hold interval(ms): Level 1: 80, Level 2: 80\\n\\u00a0\\u00a0Last Level 1 SPF run 9 seconds ago\\n\\u00a0\\u00a0Last Level 2 SPF run 9 seconds ago\\n\\u00a0\\u00a0CSNP generation interval: 10 seconds\\n\\u00a0\\u00a0Dynamic Flooding: Disabled\\n\\u00a0\\u00a0Authentication mode: Level 1: None, Level 2: None\\n\\u00a0\\u00a0Graceful Restart: Disabled, Graceful Restart Helper: Enabled\\n\\u00a0\\u00a0Area addresses: 40\\n\\u00a0\\u00a0level 1: number DIS interfaces: 0, LSDB size: 1\\n\\u00a0\\u00a0\\u00a0\\u00a0Area Leader: None\\n\\u00a0\\u00a0\\u00a0\\u00a0Overload Bit is not set.\\u00a0\\n\\u00a0\\u00a0level 2: number DIS interfaces: 0, LSDB size: 1\\n\\u00a0\\u00a0\\u00a0\\u00a0Area Leader: None\\n\\u00a0\\u00a0\\u00a0\\u00a0Overload Bit is not set.\\u00a0\\n\\u00a0\\u00a0Redistributed Level 1 routes: 0 limit: Not Configured\\n\\u00a0\\u00a0Redistributed Level 2 routes: 0 limit: Not Configured\\n\\n\\n\\nIf IS-IS is not configured, there is no exposure to this issue.\\n\\n\\n\\n\\nswitch#show isis summary\\nswitch#\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eIn order to be vulnerable to CVE-2026-73459, the following condition must be met: \u003cbr\u003e\u003cbr\u003eIS-IS should be configured.\u003c/p\u003e\u003cpre\u003eswitch# show isis summary\\nIS-IS Instance: 1 VRF: default\\n\u0026nbsp;\u0026nbsp;Instance ID: 0\\n\u0026nbsp;\u0026nbsp;System ID: 1111.1111.1001, administratively enabled\\n\u0026nbsp;\u0026nbsp;Router ID: IPv4: 0.0.0.0\\n\u0026nbsp;\u0026nbsp;Multi Topology disabled, not attached\\n\u0026nbsp;\u0026nbsp;IPv4 Preference: Level 1: 115, Level 2: 115\\n\u0026nbsp;\u0026nbsp;IPv6 Preference: Level 1: 115, Level 2: 115\\n\u0026nbsp;\u0026nbsp;IS-Type: Level 1 and 2, Number active interfaces: 1\\n\u0026nbsp;\u0026nbsp;Routes both IPv4 and IPv6\\n\u0026nbsp;\u0026nbsp;LSP size maximum: Level 1: 1492, Level 2: 1492\\n\u0026nbsp;\u0026nbsp;Interval Type \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; Max Wait Initial Wait Hold Interval\\n\u0026nbsp;\u0026nbsp;----------------------- -------- ------------ -------------\\n\u0026nbsp;\u0026nbsp;LSP generation interval\u0026nbsp; \u0026nbsp; \u0026nbsp; 5 s\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; 50 ms \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; 50 ms\\n\u0026nbsp;\u0026nbsp;SPF interval\u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; 30000 ms \u0026nbsp; \u0026nbsp; \u0026nbsp; 300 ms \u0026nbsp; \u0026nbsp; \u0026nbsp; \u0026nbsp; 80 ms\\n\u0026nbsp;\u0026nbsp;Current SPF hold interval(ms): Level 1: 80, Level 2: 80\\n\u0026nbsp;\u0026nbsp;Last Level 1 SPF run 9 seconds ago\\n\u0026nbsp;\u0026nbsp;Last Level 2 SPF run 9 seconds ago\\n\u0026nbsp;\u0026nbsp;CSNP generation interval: 10 seconds\\n\u0026nbsp;\u0026nbsp;Dynamic Flooding: Disabled\\n\u0026nbsp;\u0026nbsp;Authentication mode: Level 1: None, Level 2: None\\n\u0026nbsp;\u0026nbsp;Graceful Restart: Disabled, Graceful Restart Helper: Enabled\\n\u0026nbsp;\u0026nbsp;Area addresses: 40\\n\u0026nbsp;\u0026nbsp;level 1: number DIS interfaces: 0, LSDB size: 1\\n\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;Area Leader: None\\n\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;Overload Bit is not set.\u0026nbsp;\\n\u0026nbsp;\u0026nbsp;level 2: number DIS interfaces: 0, LSDB size: 1\\n\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;Area Leader: None\\n\u0026nbsp;\u0026nbsp;\u0026nbsp;\u0026nbsp;Overload Bit is not set.\u0026nbsp;\\n\u0026nbsp;\u0026nbsp;Redistributed Level 1 routes: 0 limit: Not Configured\\n\u0026nbsp;\u0026nbsp;Redistributed Level 2 routes: 0 limit: Not Configured\u003c/pre\u003e\u003cp\u003eIf IS-IS is not configured, there is no exposure to this issue.\u003cbr\u003e\u003c/p\u003e\u003cpre\u003eswitch#show isis summary\\nswitch#\u0026nbsp;\u003c/pre\u003e\", \"base64\": false}]}], \"providerMetadata\": {\"orgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"shortName\": \"Arista\", \"dateUpdated\": \"2026-09-15T23:16:27.270Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-73459\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-16T19:34:44.583Z\", \"dateReserved\": \"2026-08-12T16:45:03.511Z\", \"assignerOrgId\": \"c8b34d1a-69ae-45c3-88fe-f3b3d44f39b7\", \"datePublished\": \"2026-09-15T23:16:27.270Z\", \"assignerShortName\": \"Arista\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.