Known Exploited Vulnerabilities September 22, 2026 · CISA KEV Catalog

CVE-2026-93952: Arista Velo Cloud Orchestrator Improper Input Validation Vulnerability

Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: Arista CVE-2026-93952
Related: CVE-2026-114625: Arista Velo Cloud Orchestrator SQL Injection Vulnerability Known Exploited Vulnerabilities · Oct 23, 2026
CVE-2026-16812: Arista Velo Cloud Orchestrator On-Prem OS Command Injection Vulnerability Known Exploited Vulnerabilities · Jul 27, 2026
CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Known Exploited Vulnerabilities · Jun 09, 2026