Source: Mitre, NVD – Published: 2026-09-15

Preface: Referring to the architecture in the infographic, only the Arista switches rely on IS-IS to map the network topology and find the shortest path (or multiple equal-cost paths via ECMP) between the physical leaf and spine switches.

The BlueField-3 SuperNIC does not calculate network paths, nor does it maintain an IS-IS routing table. Instead, it relies entirely on the infrastructure provided by the Arista switches to deliver its packets to the correct destination.

The Breakdown of Roles

•               Arista Switches (The Mapmakers): They use IS-IS to dynamically learn how all the switches are interconnected. They calculate the shortest, loop-free paths across the spine-leaf fabric so they know exactly which egress port to send a packet out of.

•               BlueField-3 SuperNIC (The Speed Engine): It simply hands packets over to its connected Arista leaf switch with a destination IP address. The SuperNIC’s “optimization” comes down to how it sends those packets (e.g., shaping traffic, handling hardware retries, and responding to congestion signals), not where they go.

Background: Where exactly is the CVE-2026-73460 vulnerability exposed in the AI ​​cluster architecture of the infographic?

This vulnerability directly threatens the High-Performance Fabric Switches (Arista 7300 Series). When they are processing 400G RoCE high-speed traffic with the NVIDIA BlueField-3 DPU network interface cards over optical fiber, the switch becomes a potential target if IS-IS Graceful Restart is enabled.

What conditions must an attacker meet to launch this attack? Can they steal data?

o               Attack Conditions: The attacker does not need administrative privileges (Unauthenticated), but they must be positioned to inject malicious IS-IS LSP packets into our network.

o               Impact: This is a Denial of Service (DoS) vulnerability caused by Incorrect Authorization (CWE-863). The attacker cannot steal data, but they can cause the switch’s graceful restart process to terminate prematurely, resulting in severe network disruption and traffic loss.

Vulnerability details: CVE-2026-73460 On affected platforms running Arista EOS with IS-IS graceful restart enabled, an unauthenticated attacker who can inject a malformed IS-IS LSP PDU packet can cause the IS-IS graceful restart procedure to terminate prematurely. This may result in traffic loss following a restart event.

Official announcement: Please refer to the link for details – https://www.tenable.com/cve/CVE-2026-73460