Vulnpedia
← All CVEs

CVE-2026-93952

CRITICAL 9.5 KNOWN EXPLOITED ALL-YEARS

Published 2026-09-22 · Last modified 2026-09-23 · Arista · NVD: Analyzed

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Hosted, including Dedicated, versions of VCO were impacted and have already been patched.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2026-09-22. Patch or mitigate now.

Exploitation likelihood

1.1%chance of exploitation in 30 days · 64th percentile

● In CISA KEV (2026-09-22)○ Public exploit / PoC◆ SSVC: exploitation active, automatable yes

Impact if exploited

9.5CVSS 4.0 · CRITICAL · CNA

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ✓Privileges: No account or privileges required
  • ✓User interaction: No user interaction needed
  • ⚠Complexity: Needs a race window or specific setup
  • ✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

No public exploit or proof-of-concept code is catalogued for this CVE (no ExploitDB, Nuclei, or CISA-KEV entry). It may still exist — search GitHub or check the references below.

Affected

Vendors Arista Networks Arista

Products Velocloud Orchestrator (Vco) On Prem Velocloud Orchestrator

Weakness (CWE)

  • CWE-20: Improper Input Validation

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Known Affected Software Configurations

VendorProductVersion range
AristaVelocloud Orchestrator≥ 5.2.0 and < 5.2.3.16
AristaVelocloud Orchestrator≥ 6.1.0 and ≤ 6.1.3.7
AristaVelocloud Orchestrator≥ 6.4.0 and < 6.4.2.8
AristaVelocloud Orchestrator≥ 7.0.0 and ≤ 7.0.0.2

All CVSS metrics

  • CRITICAL 10 v3.1 · CNA Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
  • CRITICAL 9.5 v4.0 · CNA Primary
    CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
  • CRITICAL 9.5 v4.0 · NVD Secondary
    CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • CRITICAL 10 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

Patches & mitigations

Advisories

Sources: NVD · CVE.org · EPSS