Critical 10.0
CVE-2026-93952
Arista VeloCloud Orchestrator Zero-Day Exploitation (CVE-2026-93952)
Vendor / product: Arista VeloCloud Orchestrator
Event date: 2026-09-22
Public PoC: Yes
First tracked by RiskWire: 2026-09-24
Sources & citations (2)
- Arista patches actively exploited VeloCloud Orchestrator zero-day bleepingcomputer.com · 2026-09-23
- Arista VeloCloud Flaw Hits CVSS 10.0: Patch Now sqmagazine.co.uk · 2026-09-23
References
See CVE-2026-93952 in context
RiskWire tracks every exploited CVE this week, cross-referenced against CISA KEV with federal remediation deadlines. Filtered to your vendor stack.
Book a 20-min demo →