---
title: "Arista: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/arista/
description: "Every Arista vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (3), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-09-22
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Arista: known exploited vulnerabilities

- 2026-09-22 [CVE-2026-93952](https://erroneo.us/security/cve/CVE-2026-93952/index.md) Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (due 2026-09-25; ransomware: Unknown)
- 2026-07-27 [CVE-2026-16812](https://erroneo.us/security/cve/CVE-2026-16812/index.md) Arista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability (due 2026-07-30; ransomware: Unknown)
- 2026-06-09 [CVE-2026-7473](https://erroneo.us/security/cve/CVE-2026-7473/index.md) Arista Extensible Operating System: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability (due 2026-06-23; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/arista/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt