Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Product

VeloCloud Orchestrator

Made by Arista. 2 of its vulnerabilities are known to have been exploited.

Coverage

CriticalAct nowExploitedCISA KEV

Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVE-2026-93952) is being actively exploited, CISA warns

CISA added CVE-2026-93952 (Arista VeloCloud Orchestrator) to its Known Exploited Vulnerabilities catalog on September 22, 2026, which means there is reliable evidence of exploitation in the wild. Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation…

Why it matters

CISA lists this as exploited in the wild. Unpatched VeloCloud Orchestrator systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited VulnerabilitiesSecurity pros
CriticalAct nowExploitedCISA KEV

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…

Why it matters

CISA lists this as exploited in the wild. Unpatched BIG-IP and Multiple Products systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Cybersecurity Advisories · 4 sources
EnterpriseSecurity pros

Actively exploited

CVE-2026-93952CVSS 9.5

Arista VeloCloud Orchestrator

Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

Added Sep 22, 2026Fed. due Sep 25, 2026Coverage →
CVE-2026-16812CVSS 10.0

Arista VeloCloud Orchestrator

Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

Added Jul 27, 2026Fed. due Jul 30, 2026