Vendor

Arista

Follow AristaFree accountCovers every Arista product. No need to list them.

3 known exploited

Arista news

CriticalAct nowExploitedCISA KEV

Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVE-2026-93952) is being actively exploited, CISA warns

CISA added CVE-2026-93952 (Arista VeloCloud Orchestrator) to its Known Exploited Vulnerabilities catalog on September 22, 2026, which means there is reliable evidence of exploitation in the wild. Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation…

Why it matters

CISA lists this as exploited in the wild. Unpatched VeloCloud Orchestrator systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities14 days agoSecurity pros

CriticalAct nowExploitedCISA KEV

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-7273 Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing…

Why it matters

CISA lists this as exploited in the wild. Unpatched BIG-IP and Multiple Products systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Cybersecurity Advisories · 4 sources