Hvězdička u CVE znamená, že jsem to číslo vytáhl z širšího textu článku.
Neukazuju u něj proto KEV, EPSS ani CVSS, a to preventivně, protože článek se na něj mohl
jen odkazovat, třeba jako na starší kauzu.
Arista heeft een kritieke kwetsbaarheid verholpen in VeloCloud Orchestrator (VCO) On-Prem. De kwetsbaarheid met kenmerk CVE-2026-114625 heeft een CVSS-score van 9.9 en betreft SQL-injectie. Een geauthenticeerde kwaadwillende kan de kwetsbaarheid op afstand misbruiken om verhoogde rechten te verkrijgen en zich voor te doen als een lokale 'superuser operator'. Hierdoor kan de kwaadwillende toegang krijgen tot interne beheerfunctionaliteiten en mogelijk de vertrouwelijkheid, integriteit en…
Serial number: AV26-1015 Date: October 7, 2026 As of October 6, 2026, Arista Networks is affected by vulnerabilities in the following product: CloudVision CUE Version 2026.2.0 and prior Version 2021.2.0 and prior Version 2022.2.0 and prior Version 2022.3.0 and prior The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Advisory 0190 Arista Networks Advisories & Notices
Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments. [...]
Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: 10.0, CVEs: CVE-2026-93952, Summary: Arista has disclosed a critical vulnerability in on-premises VeloCloud Orchestrator (VCO) deployments that can allow a remote attacker to access privileged internal functionality and compromise the VCO host and data managed by the orchestrator. The vulnerability is actively exploited. Exploitation requires certificate-based authentication between VeloCloud Edge and VCO to be…
Serial number: AV26-940Date: September 18, 2026 As of September 9, 2026, Arista Networks is affected by vulnerabilities in the following product: EOS Multiple versions and platforms The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Security Advisory 0174 Arista Networks Advisories & Notices