Critical severity · published Sep 22, 2026
CVE-2026-93952
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host
In wildKEV
10.0
CVSS
1.4%
EPSS
Yes
On KEV
Description
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.
Hosted, including Dedicated, versions of VCO were impacted and have already been patched.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildYes
CISA KEVListed Sep 22, 2026
Federal remediation dueSep 25, 2026
Ransomware campaign useNot known
Affected products
Which versions
VO
VeloCloud Orchestrator (VCO) On-Prem · Arista Networks
5.2.0 through 5.2.3.15; 6.1.0 through 6.1.3.7; 6.4.0 through 6.4.2.7; 7.0.0 through 7.0.0.2 · source: vendor
VO
Velocloud Orchestrator · Arista
5.2.0 before 5.2.3.16; 6.1.0 through 6.1.3.7; 6.4.0 before 6.4.2.8; 7.0.0 through 7.0.0.2 · source: NVD, KEV
In the news
VulnerabilityHigh
[CISA KEV] CVE-2026-93952: Arista VeloCloud Orchestrator - Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.
VOVeloCloud OrchestratorCVE-2026-93952
Sep 22, 2026·CISA KEV
Affected product
VO
VeloCloud Orchestrator (VCO) On-Prem
Arista Networks
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-93952
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-93952
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vendor-advisory
https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183