On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacent unauthenticated attacker can send malformed network packets on an affected VLAN to cause the IGMP snooping agent to terminate unexpectedly. This results in a temporary disruption of multicast traffic management, which may cause multicast traffic to be flooded to all ports of the affected VLAN until the service recovers. Repeated exploitation could result in a prolonged loss of intended multicast forwarding behavior.
"}]}],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24715-security-advisory-0159","tags":["vendor-advisory"]}],"configurations":[{"lang":"en","value":"IGMP snooping agent is instantiated by default on EOS. No configuration is required.","supportingMedia":[{"type":"text/html","base64":false,"value":"IGMP snooping agent is instantiated by default on EOS. No configuration is required.
"}]}],"workarounds":[{"lang":"en","value":"There is no mitigation or workaround available. Disabling IGMP snooping will NOT mitigate the issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"There is no mitigation or workaround available. Disabling IGMP snooping will NOT mitigate the issue.
"}]}],"solutions":[{"lang":"en","value":"The recommended resolution is to upgrade to a remediated software version at your earliest convenience. CVE-2026-73462 has been fixed in the following releases:\n\n * 4.36.2F and later releases in the 4.36.x train\n * 4.35.6M and later releases in the 4.35.x train\n * 4.34.8M and later releases in the 4.34.x train\n * 4.33.9M and later releases in the 4.33.x train","supportingMedia":[{"type":"text/html","base64":false,"value":"The recommended resolution is to upgrade to a remediated software version at your earliest convenience. CVE-2026-73462 has been fixed in the following releases: