A maximum-severity command injection vulnerability in on-premises versions of Arista VeloCloud Orchestrator (VCO) is being actively exploited. Tracked as CVE-2026-16812 with a…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following reports…
active exploitationAristaArista Extensible Operating System (EOS)CISA
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud…
AristaCISA KEVCVE-2026-7473Extensible Operating System