VIRY.CZRADAR
sektor
téma
typ textu
zrušit filtry

Výsledky hledání

výrobce: Arista Networks× typ: zneužíváno× v celém archivu zrušit filtry

4 karet z 5 položek CZ · EN/orig

Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku. Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.

SPOJENO PŘES CVE Arista Networks security advisory (AV26-1080)

Serial number: AV26-1080 Date: October 23, 2026 As of October 22, 2026, Arista Networks is affected by a vulnerability in the following product: VeloCloud Orchestrator (VCO) Prior to 5.2.3.18 Prior to 6.1.3.10 Prior to 6.4.2.12 Arista Networks indicates that CVE-2026-114625 is exploited in the wild. The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Advisory 0199 Arista Networks Advisories &…

KEV ✓ EPSS 0.01 CVE-2026-114625 Arista Networks Arista CA IT US

tg: zneužíváno tg: zranitelnost

· Cyber Centre Kanada · Arista Networks security advisory (AV26-1080) · CSIRT Itálie (ACN) · Arista Networks: rilevato sfruttamento in rete della CVE-2026-114625 · zachyceno · CISA KEV · Arista VeloCloud Orchestrator SQL Injection Vulnerability (CVE-2026-114625)

· zachyceno

SPOJENO PŘES CVE Arista VeloCloud Orchestrator - Actively Exploited Critical Vulnerability

Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 10.0, CVEs: CVE-2026-93952, Summary: Arista has disclosed a critical vulnerability in on-premises VeloCloud Orchestrator (VCO) deployments that can allow a remote attacker to access privileged internal functionality and compromise the VCO host and data managed by the orchestrator. The vulnerability is actively exploited. Exploitation requires certificate-based authentication between VeloCloud Edge and VCO to be…

KEV ✓ EPSS 0.01 CVSS 10.0 CVE-2026-93952 Arista Arista Networks FI CA US

tg: zneužíváno tg: zranitelnost

· zachyceno · NCSC-FI · Arista VeloCloud Orchestrator - Actively Exploited Critical Vulnerability · Cyber Centre Kanada · Arista Networks security advisory (AV26-947) · zachyceno · CISA KEV · Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVE-2026-93952)