CVE-2026-93952Vulnerability

1. “…lnerability in the same product to have been weaponized in the wild since July 2026, following CVE-2026-16812 (CVSS score: 10.0) and CVE-2026-93952 (CVSS score: 10.0).”

   The Hacker NewsNews24 Oct 2026
   CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

2. “CVE-2026-114625 is the third exploited zero-day vulnerability Arista patches in VCO in four months, after CVE-2026-16812 in July and CVE-2026-93952 in September.”

   SecurityWeekNews23 Oct 2026
   Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

3. “CVE-2026-114625 is the third actively exploited VCO vulnerability Arista has disclosed since July, following CVE-2026-16812 and CVE-2026-93952.”

   SOCRadarVendor23 Oct 2026
   CVE-2026-114625: Actively Exploited VeloCloud Orchestrator Flaw Grants Superuser Access

4. “Neither the July flaw (CVE-2026-16812) nor the September flaw (CVE-2026-93952) needed one.”

   The Hacker NewsNews22 Oct 2026
   Arista Warns of Critical VeloCloud SQL Injection Zero-Day Exploited in Attacks

5. “CVE-2026-93952”

   Recorded FutureVendor13 Oct 2026
   September 2026 CVE Landscape

6. “The development comes as number of security flaws in Check Point (CVE-2026-85102 and CVE-2026-93616), Arista VeloCloud Orchestrator (CVE-2026-93952), F5 BIG-IP Access Policy Manager (CVE-2026-94127), Cisco Catalyst SD-WAN Manager (CVE-2026-76504), and Citrix NetScaler ADC and Net…”

   The Hacker NewsNews2 Oct 2026
   Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes

7. “…9 (Docker), CVE-2026-93485, CVE-2026-87902 (WordPress), CVE-2026-89775 (Linux kernel), CVE-2026-93616, CVE-2026-85102 (Check Point), CVE-2026-93952 (Arista VeloCloud Orchestrator), CVE-2026-90898 (Bifrost), CVE-2026-86555, CVE-2026-86554, CVE-2026-86553, CVE-2026-86552 (ZTE H188A…”

   The Hacker NewsNews28 Sep 2026
   ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats

8. “CVE-2026-93952”

   CERT-FRGovernment28 Sep 2026
   Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)

9. “CVE-2026-93952: vulnerabilidad de validación incorrecta de datos de entrada en VeloCloud Orchestrator on-premise.”

   INCIBE-CERTGovernment23 Sep 2026
   Validación incorrecta de datos de entrada en VeloCloud Orchestrator de Arista

10. “[Arista CVE-2026-93952]”

    Risky Business NewsNews23 Sep 2026
    Risky Bulletin: Network of 10,000 AI servers masks Chinese malicious activity

11. “On September 22, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-93952 to their Known Exploited Vulnerabilities (KEV) Database.”

    Canadian Centre for Cyber SecurityGovernment22 Sep 2026
    Arista Networks security advisory (AV26-947) – Update 1

12. “The flaw, tracked as CVE-2026-93952, may allow a remote attacker with no login access to privilege internal functions and affect the VCO host.”

    The Hacker NewsNews22 Sep 2026
    New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

13. “CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability”

    CISA advisoriesGovernment22 Sep 2026
    CISA Adds Four Known Exploited Vulnerabilities to Catalog

• 6.1.3[.]7in 4 reports
• 6.1.3[.]10in 4 reports
• 6.4.2[.]12in 4 reports
• 74.82.197[.]86in 4 reports
• 38.54.50[.]151in 4 reports
• 5.2.3[.]15in 3 reports
• 5.2.3[.]16in 3 reports
• 6.4.2[.]7in 3 reports
• 6.4.2[.]8in 3 reports
• 7.0.0[.]2in 3 reports

Also named with it: CVE-2026-93616, CVE-2026-94127, CVE-2026-16812, CVE-2026-85102, CVE-2026-88771, CVE-2026-114625, CVE-2026-87902, CVE-2026-88772, CVE-2026-28324, CVE-2026-65660