EXPOSURES › CVE-2026-93952
CVE-2026-93952
HIGH ⌖ ON CISA KEV · EXPLOITEDArista VeloCloud Orchestrator suffers an actively exploited improper input validation flaw allowing remote attackers to access privileged functionality and compromise the host.
The Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that allows remote attackers to access privileged internal functionality and impact the VCO host. This failure compromises the confidentiality, integrity, and availability of the orchestrator and its managed data, directly impacting DIB organizations relying on network automation and orchestration. DIB orgs must immediately patch VCO instances and monitor for similar active exploits in their supply chain.
Shame score — The vulnerability is actively exploited in the wild (KEV), indicating negligent patch management and a failure to protect critical network infrastructure from known, active threats.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.