MSRXArista vulnerabilities being exploited
4 Arista flaws were confirmed exploited in the wild in the past 365 days, across 2 products: Extensible Operating System, VeloCloud Orchestrator. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2026-10-23 | CVE-2026-114625 VeloCloud Orchestrator Arista VeloCloud Orchestrator SQL Injection Vulnerability Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. | 2026-10-26 |
| 2026-09-22 | CVE-2026-93952 VeloCloud Orchestrator Arista VeloCloud Orchestrator Improper Input Validation Vulnerability Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. | 2026-09-25 |
| 2026-07-27 | CVE-2026-16812 VeloCloud Orchestrator Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. | 2026-07-30 |
| 2026-06-09 | CVE-2026-7473 Extensible Operating System Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. | 2026-06-23 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.