VO
Product
VeloCloud Orchestrator
by Arista · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
5
CVEs
4
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 3High 2Medium 0Low 0
Watch

Add VeloCloud Orchestrator to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31431
In wildKEV
7.8
98%
Apr 22
crypto: algif_aead - Revert to operating out-of-place
Affected: All versions, or not specified
CVE-2020-3973
8.8
1%
Jul 8
The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection
Affected: 3.1.1 before 3.3.2; 3.3.2; 3.4.0
Showing 2