Skip to content
Exploit Radar Choose my productsProducts My radar
English

Products › Brands

Brand

Arista: actively exploited vulnerabilities

3 vulnerabilities in Arista products (SD-WAN (VeloCloud), EOS) are in CISA’s catalog of exploited vulnerabilities, 2 of them added in the last 90 days. Last added: September 22, 2026.

By category

Add just one Arista category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • SD-WAN (VeloCloud) 2 vulnerabilities · Switches and routers
  • EOS 1 vulnerability · Switches and routers

Name used by CISA: Arista. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Arista list.

  1. Rank 1Arista SD-WAN (VeloCloud)

    CVE-2026-93952

    Recently addedHunt for compromise (CISA)

    Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

    Added to the catalog less than 30 days ago: ranked by date added.

    Added
    Sep 22, 2026
    CISA deadline
    3 days
    CVSS severity
    10.0 (critical)

  2. Rank 2Arista SD-WAN (VeloCloud)

    CVE-2026-16812

    Hunt for compromise (CISA)

    Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jul 27, 2026
    CISA deadline
    3 days
    CVSS severity
    10.0 (critical)

  3. Rank 3Arista EOS

    CVE-2026-7473

    Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

    Added in the last 12 months: ranked by severity.

    Added
    Jun 9, 2026
    CISA deadline
    14 days
    CVSS severity
    5.8 (medium)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.