♡ Follow 0
Critical CVEs
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security…
Arista
CISA KEV
CVE-2026-93952
VeloCloud Orchestrator
September 22, 2026
♡ Follow 0
Critical CVEs
A maximum-severity command injection vulnerability in on-premises versions of Arista VeloCloud Orchestrator (VCO) is being actively exploited. Tracked as CVE-2026-16812 with a…
active exploitation
Alibaba
Alibaba Fastjson
Arista
July 28, 2026
♡ Follow 0
Cyber Products
On-premises SD-WAN orchestration platform affected by CVE-2026-16812 command injection flaw. Patches available for hosted and dedicated versions.
Arista
SD-WAN
VeloCloud Orchestrator
July 28, 2026