CVEs published by Arista Networks, Inc.

CVEs published by Arista Networks, Inc. (CVE Numbering Authority). 5 tracked.

CVE-2026-16812 CRITICAL 10.0 EXPLOITED UPGRADE Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
CVE-2026-17191 CRITICAL 9.1 An input validation vulnerability exists in an API component of the orchestrator
CVE-2026-17192 HIGH 8.5 A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of
CVE-2026-114625 CRITICAL 9.9 EXPLOITED UPGRADE Arista VeloCloud Orchestrator SQL Injection Vulnerability
CVE-2026-93952 CRITICAL 10.0 EXPLOITED UPGRADE Arista VeloCloud Orchestrator Improper Input Validation Vulnerability