{"vulnerability": "cve-2026-7345", "sightings": [{"uuid": "99b2f087-2a13-43a1-97a7-f3c868f5d9b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7345", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities_20260429", "content": "", "creation_timestamp": "2026-04-28T20:00:00.000000Z"}, {"uuid": "10871d08-3e0d-430d-a94e-c1d1dfe77117", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7345", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mklvsocng42o", "content": "", "creation_timestamp": "2026-04-29T01:05:25.038254Z"}, {"uuid": "734e671d-933c-4105-b366-3dd614369477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-7345", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities_20260504", "content": "", "creation_timestamp": "2026-05-03T18:00:00.000000Z"}, {"uuid": "35b3c582-689a-4b82-8229-abaea3259725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7345", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlimbr2jre22", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-7345 google\u306echrome\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nGoogle Chrome \u306e 147.0.7727.138 \u3088\u308a\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u304a\u3044\u3066\u3001Feedback \u306b\u304a\u3051\u308b\u4fe1\u983c\u3067\u304d\u306a\u3044\u5165\u529b\u306e\u691c\u8a3c\u304c\u4e0d\u5341\u5206\u3067\u3042\u308b\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u307e\u3059\u3002", "creation_timestamp": "2026-05-10T11:02:07.675241Z"}, {"uuid": "7282e7e8-cb8b-40d5-98f7-bcd619c734fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73456", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0366", "content": "Arista heeft kwetsbaarheden verholpen in de Arista EOS-platform. De kwetsbaarheid met kenmerk CVE-2026-73456 bevindt zich in de verwerking van verzoeken die via gNPSI worden aangeboden. Onder de kwetsbare configuratie kan een niet-geauthenticeerde client een kwaadaardig verzoek aanbieden waarmee code-injectie kan worden veroorzaakt. Een kwaadwillende met netwerktoegang tot de gNPSI-service kan zonder authenticatie een speciaal vervaardigd verzoek versturen waarmee willekeurige code kan worden uitgevoerd. Hierdoor kan de kwaadwillende volledige administratieve controle over de getroffen switch verkrijgen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-73457, kan ertoe leiden dat gNPSI-clientgegevens, waaronder wachtwoorden, in plaintext in lokale of remote accounting logs terechtkomen. Een kwaadwillende met voldoende rechten om de betreffende logs te benaderen, kan deze gegevens vervolgens uitlezen.\nVolgens Arista is misrbuik mogelijk indien gNPSI is ingeschakeld \u00e9n de trace facility EosRpcAuth expliciet is geactiveerd. gNPSI is standaard uitgeschakeld. \n\nVolgens Arista is misbruik uitsluitend mogelijk wanneer gNPSI is ingeschakeld, in combinatie met specifieke TLS- en authenticatieconfiguraties, dan wel met een expliciet geactiveerde EosRpcAuth trace facility. Aangezien gNPSI standaard is uitgeschakeld, zijn systemen met de fabrieksinstellingen niet kwetsbaar.", "creation_timestamp": "2026-09-11T10:00:41.890566Z"}, {"uuid": "e59a6c4c-5ea6-45f9-b7be-4aaf95e9f082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73457", "type": "seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2026-0366", "content": "Arista heeft kwetsbaarheden verholpen in de Arista EOS-platform. De kwetsbaarheid met kenmerk CVE-2026-73456 bevindt zich in de verwerking van verzoeken die via gNPSI worden aangeboden. Onder de kwetsbare configuratie kan een niet-geauthenticeerde client een kwaadaardig verzoek aanbieden waarmee code-injectie kan worden veroorzaakt. Een kwaadwillende met netwerktoegang tot de gNPSI-service kan zonder authenticatie een speciaal vervaardigd verzoek versturen waarmee willekeurige code kan worden uitgevoerd. Hierdoor kan de kwaadwillende volledige administratieve controle over de getroffen switch verkrijgen.\n\nDe kwetsbaarheid met kenmerk CVE-2026-73457, kan ertoe leiden dat gNPSI-clientgegevens, waaronder wachtwoorden, in plaintext in lokale of remote accounting logs terechtkomen. Een kwaadwillende met voldoende rechten om de betreffende logs te benaderen, kan deze gegevens vervolgens uitlezen.\nVolgens Arista is misrbuik mogelijk indien gNPSI is ingeschakeld \u00e9n de trace facility EosRpcAuth expliciet is geactiveerd. gNPSI is standaard uitgeschakeld. \n\nVolgens Arista is misbruik uitsluitend mogelijk wanneer gNPSI is ingeschakeld, in combinatie met specifieke TLS- en authenticatieconfiguraties, dan wel met een expliciet geactiveerde EosRpcAuth trace facility. Aangezien gNPSI standaard is uitgeschakeld, zijn systemen met de fabrieksinstellingen niet kwetsbaar.", "creation_timestamp": "2026-09-11T10:00:41.951718Z"}, {"uuid": "a9af0067-07f3-4d9a-8635-ed3cbe00b9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73458", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvlit2csxi22", "content": "CVE-2026-73458 - eos\nArista EOS devices that use authenticated Bidirectional Forwarding Detection (BFD) can have those sessions dropped when they receive a specially crafted network packet. When BFD\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eos #aristanetworks #CVE #infosec", "creation_timestamp": "2026-09-15T20:50:06.676030Z"}, {"uuid": "f849b9b7-728d-45ec-a7fe-8e4443c1df8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73458", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvlna2pvy425", "content": "\ud83d\udea8 CVE-2026-73458 \u2014 CVSS 9.2 CRITICAL\n\nOn affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessio...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73458\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-15T22:08:58.577515Z"}, {"uuid": "ab824986-cdee-423f-8a9b-e1c60e6b1b76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73453", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117280251825448696", "content": "CVE-2026-73453: CRITICAL code injection in Arista EOS (4.29.2F \u2013 4.36.1F) via P4Runtime. Allows unauthenticated code execution & admin control if enabled. Disable P4Runtime if not needed. No active exploits yet. https://radar.offseq.com/threat/cve-2026-73453-cwe-94-improper-control-of-generation-of-code-code-injection-in-arista-networks-eos-86cb5135e8adffc5 #OffSeq #CVE202673453 #NetworkSecurity", "creation_timestamp": "2026-09-16T10:30:24.416732Z"}, {"uuid": "66589cc3-0dec-4045-994a-1a9748b94ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-73453", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvmwnvwa2e2e", "content": "CVE-2026-73453: Arista EOS (4.29.2F \u2013 4.36.1F) has a CRITICAL code injection flaw if P4Runtime is enabled. Unauth attacker can gain full admin control. Disable P4Runtime if not required. https://radar.offseq.com/threat/cve-2026-73453-cwe-94-improper-control-of-generation-of-code-code-injection-in...", "creation_timestamp": "2026-09-16T10:30:26.500108Z"}, {"uuid": "79a0ec52-25c6-45c6-b400-336a704a4507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73453", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvmyd233wm24", "content": "CVE-2026-73453 - eos\nIf the P4Runtime feature is turned on in Arista EOS, an attacker who can send a specially crafted packet can gain full administrative control of the switch. The attack does not\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eos #aristanetworks #CVE #infosec", "creation_timestamp": "2026-09-16T11:00:08.652176Z"}, {"uuid": "d8eec553-9a0e-467d-ac00-0d9a6c4ec366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73455", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fmmajy23xuuqg", "content": "CVE-2026-73455 - Security Advisory 0173\nCVE ID : CVE-2026-73455\n \n Published : Sept. 16, 2026, 10:16 a.m. | 28\u00a0minutes ago\n \n Description : On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, a specially crafted packet can caus...", "creation_timestamp": "2026-09-16T11:29:53.069749Z"}, {"uuid": "72edaf03-468a-440b-81d1-30bfd490d337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73453", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cxdlfay4pbkas", "content": "CVE-2026-73453 - Security Advisory 0174\nCVE ID : CVE-2026-73453\n \n Published : Sept. 16, 2026, 10:16 a.m. | 28\u00a0minutes ago\n \n Description : An unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achieve arbitrary code execution und...", "creation_timestamp": "2026-09-16T11:31:52.340112Z"}, {"uuid": "93f2ef0a-38c3-45e9-825d-9c7646387ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73453", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvn43pxznc2j", "content": "\ud83d\udea8 CVE-2026-73453 \u2014 CVSS 9.5 CRITICAL\n\nAn unauthenticated P4Runtime (Programming Protocol-Independent Packet Processors Runtime) client can achiev...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73453\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T12:07:38.155330Z"}, {"uuid": "43b769c8-40ad-4bd1-b904-5e50ca7ad13c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73456", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnuayuosi2r", "content": "CVE-2026-73456 - eos\nSwitches running Arista EOS with the gNPSI feature turned on can be accessed by anyone on the network. An attacker could send a specially crafted message that runs code on the switch\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eos #aristanetworks #CVE #infosec", "creation_timestamp": "2026-09-16T19:20:05.241005Z"}, {"uuid": "f6dcdfdf-ca98-4138-b29e-75b31ece07f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-73456", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnwx2hr6r2f", "content": "\ud83d\udea8 CVE-2026-73456 \u2014 CVSS 9.2 CRITICAL\n\nUnder certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Inte...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-73456\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-16T20:08:12.371849Z"}]}