VENDOR

Arista vulnerabilities: CVEs, exploitation and patches

Every Arista CVE reviewed by Diras Labs analysts, newest first, with exploitation status and fixes.

CVE-2026-16812
VeloCloud Orchestrator pre-auth command injection in on‑prem VCO Arista VeloCloud Orchestrator · Sep 29, 2026
- CISA KEV
- EXPLOITED
- PATCH AVAILABLE
CRITICAL 10
CVE-2026-93952
VeloCloud Orchestrator improper input validation allows remote privileged access Arista VeloCloud Orchestrator · Sep 29, 2026
- CISA KEV
- EXPLOITED
CRITICAL 10