Brand
Arista: actively exploited vulnerabilities
3 vulnerabilities in Arista products (SD-WAN (VeloCloud), EOS) are in CISA’s catalog of exploited vulnerabilities, 2 of them added in the last 90 days. Last added: September 22, 2026.
-
3 vulnerabilities added in the last 12 months
-
3 exploited vulnerabilities in the catalog, in total
-
1 added in the last 30 days
By category
Add just one Arista category to your radar, or open its page.
- Switches, routers and SD-WAN 3 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
Follow a single Arista product (SD-WAN (VeloCloud), EOS…) rather than the whole brand.
- SD-WAN (VeloCloud)2 vulnerabilities, Switches and routers
- EOS1 vulnerability, Switches and routers
Name used by CISA: Arista. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Arista list.
- Rank 1
Arista SD-WAN (VeloCloud)CVE-2026-93952
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Recently addedHunt for compromise (CISA)
CVSS severity 10.0critical
Added Sep 22, 2026
- Rank 2
Arista SD-WAN (VeloCloud)CVE-2026-16812
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Hunt for compromise (CISA)
CVSS severity 10.0critical
Added Jul 27, 2026
- Rank 3
Arista EOSCVE-2026-7473
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
CVSS severity 5.8medium
Added Jun 9, 2026
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.