Výsledky hledání

CVE: CVE-2026-93952× výrobce: Arista Networks× v celém archivu zrušit filtry

3 karet z 3 položek CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

22. 10. 2026 19:18

Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

Arista Networks released security updates to patch an actively exploited zero-day vulnerability affecting VeloCloud Orchestrator (VCO) On-Prem deployments. [...]

CVE-2026-114625 * CVE-2026-16812 * CVE-2026-7473 * CVE-2026-93952 * Arista Networks US

tg: zneužíváno tg: zranitelnost

22. 10. 2026 19:18 · BleepingComputer · Arista patches new VeloCloud Orchestrator zero-day exploited in attacks

23. 9. 2026 14:29

Arista patches actively exploited VeloCloud Orchestrator zero-day

Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments. [...]

CVE-2026-16812 * CVE-2026-7473 * CVE-2026-93952 * Arista Networks US

tg: zneužíváno tg: zranitelnost

23. 9. 2026 14:29 · BleepingComputer · Arista patches actively exploited VeloCloud Orchestrator zero-day

23. 9. 2026 · zachyceno 04:00

SPOJENO PŘES CVE Arista VeloCloud Orchestrator - Actively Exploited Critical Vulnerability

Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 10.0, CVEs: CVE-2026-93952, Summary: Arista has disclosed a critical vulnerability in on-premises VeloCloud Orchestrator (VCO) deployments that can allow a remote attacker to access privileged internal functionality and compromise the VCO host and data managed by the orchestrator. The vulnerability is actively exploited. Exploitation requires certificate-based authentication between VeloCloud Edge and VCO to be…

KEV ✓ EPSS 0.01 CVSS 10.0 CVE-2026-93952 Arista Arista Networks FI CA US

tg: zneužíváno tg: zranitelnost

23. 9. 2026 · zachyceno 04:00 · NCSC-FI · Arista VeloCloud Orchestrator - Actively Exploited Critical Vulnerability 22. 9. 2026 15:14 · Cyber Centre Kanada · Arista Networks security advisory (AV26-947) 22. 9. 2026 · zachyceno 22:00 · CISA KEV · Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVE-2026-93952)