CVE-2026-7473: MEDIUM (CVSS 5.8), Actively Exploited (CISA KEV)

MEDIUM (CVSS 5.8), Actively Exploited (CISA KEV), EPSS 0.8%. On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet with a