CVE-2026-93952

Vendor

Arista Networks

Product

VeloCloud Orchestrator

CVSS

10.0

CISA KEV

added 22 Sep 2026, due 25 Sep 2026 (37d overdue)

Weakness

CWE-20

Exposure class

Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 93
   KEV NVD 22 Sep 2026

   Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

   Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may…

   KEV · due 25 Sep 2026 (overdue) CVSS 10.0 Fix available CVE-2026-93952 Arista Networks
2. 65
   CISA alert CISA 22 Sep 2026

   CISA Adds Four Known Exploited Vulnerabilities to Catalog

   CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-85102 Check Point Multiple Products Improper Certificate Validation Vulnerability…

   Exploited CVE-2026-85102CVE-2026-93616CVE-2026-93952+1 more Arista Networks Check Point