Arista Product Security Update Advisory (CVE-2026-93952)
A security update addressing a vulnerability discovered in Arista products has been released. The affected product is VeloCloud Orchestrator (VCO) On-Prem. Affected Versions are 5.2.3.15 And earlier, 6.1.3.7 And earlier, 6.4.2.7 And earlier, and 7.0.0.2 And earlier. CVE-2026-93952 is a vulnerability that allows an unauthenticated remote threat actor (an external
Arista Networks Product Security Update Advisory (CVE-2026-16812)
An OS command injection vulnerability (CVE-2026-16812) has been identified in VeloCloud Orchestrator (VCO), a product of Arista Networks. Affected Versions include VeloCloud Orchestrator (VCO) versions prior to 5.2.3.14, Prior to 6.1.3.4, Prior to 6.4.2.4, And prior to 7.0.0.1. Arista Networks has released a security update to address this vulnerability. The
