CVE database · Known exploited vulnerabilities
Arista known exploited vulnerabilities
The Beam CVE database tracks 4 known exploited vulnerabilities for Arista: 3 critical and 1 medium severity. The newest is CVE-2026-114625, published Oct 22, 2026.
These are the Arista vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 4
- Critical
- 3
- Known exploited (CISA KEV)
- 4
- Published in the last 30 days
- 1
All entries, newest first
CVE-2026-114625
Arista VeloCloud Orchestrator SQL Injection Vulnerability
critical9.9ExploitedOct 22, 2026CVE-2026-93952
Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
critical10.0ExploitedSep 22, 2026CVE-2026-16812
Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
critical10.0ExploitedJul 27, 2026CVE-2026-7473
Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
medium5.8ExploitedJun 5, 2026