Security Digest

Arista: known exploited vulnerabilities

3 Arista CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.

AddedCVEProduct and flawCISA due
2026-09-22CVE-2026-93952Arista VeloCloud Orchestrator
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
2026-09-25
2026-07-27CVE-2026-16812Arista VeloCloud Orchestrator
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
2026-07-30
2026-06-09CVE-2026-7473Arista Extensible Operating System
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
2026-06-23