#vxlan

Analysis · Jun 21, 2026 · Colten Anderson

Arista EOS decapsulates tunnel traffic it was never configured for. No patch is planned.

CVE-2026-7473 lets attackers bypass VXLAN/GRE segmentation on Arista 7000R switches by sending mismatched tunnel protocols. Arista won't patch it. The fix is ACLs, and the federal deadline is June 23.