The Cyber Security Hub™ on X: "New CVSS 10.0 VeloCloud Orchestrator Flaw Actively ...

Back X

The Cyber Security Hub™ on X: "New CVSS 10.0 VeloCloud Orchestrator Flaw Actively ...

X • September 22, 2026

Share: View original

The Cyber Security Hub™ on X: "New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2026-93952 Vulnerability in VeloCloud Orchestrator Actively Exploited A critical vulnerability, CVE-2026-93952, has been identified in Arista Networks' VeloCloud Orchestrator (VCO), allowing unauthenticated remote access to privileged internal functionalities. This flaw, rated CVSS 3.1 10.0 and CVSS 4.0 9.5, affects on-premises deployments configured with certificate-based authentication. Attackers can exploit this vulnerability without needing VCO tenant credentials, compromising the confidentiality, integrity, and availability of the orchestrator and the data it manages. Arista confirmed the vulnerability is actively exploited and has released patches for certain software trains, while others remain pending. Organizations are urged to restrict access to the VCO web interface and monitor for suspicious activity until patches can be applied. CISA added this CVE to its Known Exploited Vulnerabilities catalog on September 22, 2026, with a federal remediation deadline of September 25, 2026. 8 sources 79

Extracted Entities

Platforms (1)

VeloCloud Orchestrator