arista known exploited vulnerabilities
CISA's Known Exploited Vulnerabilities catalog lists 4 arista vulnerabilities: 4 added in the last 365 days, 3 rated critical (CVSS 9 or higher), and 0 with known ransomware use. The most recent was added Oct 23, 2026.
RSS feed for arista exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant
| Added to KEV | CVE | Vulnerability | CVSS | EPSS | Federal due date | Ransomware use |
|---|---|---|---|---|---|---|
| 2026-10-23 | CVE-2026-114625 | Arista VeloCloud Orchestrator SQL Injection Vulnerability | 9.4 (v4.0) | 1.0% | 2026-10-26 | Unknown |
| 2026-09-22 | CVE-2026-93952 | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 9.5 (v4.0) | 1.4% | 2026-09-25 | Unknown |
| 2026-07-27 | CVE-2026-16812 | Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability | 10 (v4.0) | 1.0% | 2026-07-30 | Unknown |
| 2026-06-09 | CVE-2026-7473 | Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability | 6.9 (v4.0) | 1.1% | 2026-06-23 | Unknown |