Arista

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 23, 2026
Last mentionedSep 24, 2026

Timeline

4 articles · newest first

On-prem VeloCloud Orchestrator under attack, only some versions patched

Arista warns the actively exploited CVSS 10.0 VeloCloud Orchestrator flaw CVE-2026-93952 has patches for only some affected release trains.

CSO OnlineSep 24, 13:35 UTC · Sep 24, 2026Exploit / PoCExploitedCVE-2026-939523 · 1 read

U.S. CISA adds Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its Known Exploited Vulnerabilities catalog

CISA added four actively exploited Check Point, Arista VeloCloud Orchestrator, and F5 BIG-IP APM flaws to its KEV catalog, with federal fixes due September 25.

Security AffairsSep 23, 20:37 UTC · Sep 23, 2026Exploit / PoCExploited2 sourcesCVE-2026-85102 CVE-2026-93616 CVE-2026-93952+12 · 1 read

InfraTrust report warns network management systems under attack

Active exploitation of critical Cisco and SonicWall management system vulnerabilities is a major trend, with attackers chaining flaws and deploying ransomware.

BleepingComputerSep 23, 14:35 UTC · Sep 23, 2026VulnerabilityExploitedCVE-2026-20079 CVE-2026-20316 CVE-2026-76460+54 · 1 read

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

CISA adds four actively exploited zero-days to KEV, forcing immediate patching of critical flaws in Check Point, Arista, and F5 systems.

Help Net SecuritySep 23, 10:22 UTC · Sep 23, 2026VulnerabilityExploitedCVE-2026-93616 CVE-2026-85102 CVE-2026-93952+13 · 1 read

Related CVEs

by mentions

CVE-2026-8510254%9.8
Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
published Sep 9, 2026Check Point Quantum Security Gateway (VPN negotiation functionality)KEVPoC
CVE-2026-939521%9.5
Unauthenticated Input-Validation Flaw in VeloCloud Orchestrator (On-Prem)
published Sep 22, 2026Arista (VeloCloud; formerly VMware/Broadcom) VeloCloud Orchestrator (VCO), on-premisesKEV
CVE-2026-9361692%9.8
Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
published Sep 22, 2026Check Point Management ServerKEVPoC
CVE-2026-9412727%9.3
Unauthenticated Heap-Overflow RCE in F5 BIG-IP APM with OAuth Profile
published Sep 22, 2026F5 BIG-IP (Access Policy Manager)KEVPoC ×2
CVE-2026-2007989%10.0
Authentication bypass to root access in Cisco Secure Firewall Management Center
published Mar 4, 2026Cisco Secure Firewall Management Center (FMC) Software (web interface)KEVPoC ×2
CVE-2026-835488%10.0
Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
published Sep 1, 2026SonicWall SMA1000 appliance Workplace interfaceKEVPoC ×3
CVE-2026-8354910%7.8
Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
published Sep 1, 2026SonicWall SMA1000 series appliances - Appliance Management Console (AMC)KEV
CVE-2026-2031635%5.3
Hard-Coded Password Vulnerability in Cisco Secure Firewall Management Center
published Jul 29, 2026Cisco Secure Firewall Management Center (FMC)KEVRansomware
CVE-2026-91843<1%9.8
Unauthenticated stack overflow gives root RCE in Check Point login process
published Sep 16, 2026Check PointPoC
CVE-2026-851039.8
Unauthenticated RCE in Check Point Quantum VPN Certificate ASN.1 Decoding
published Sep 9, 2026Check Point Quantum Security Management

Appears with

Check Pointorganization · 2
CISAorganization · 2
UAT-11823threat actor · 1
Check Point Spark Firewallsproduct · 1
Sandwormthreat actor · 1
F5organization · 1
Cisco Identity Services Engineproduct · 1
Cisco Secure Firewall Management Centerproduct · 1
Arista VeloCloud Orchestratorproduct · 1
UAT-11988threat actor · 1
VeloCloudorganization · 1
Check Point Quantum Security Gatewayproduct · 1
SonicWallorganization · 1
Aristavendor · 1
AttackIQorganization · 1
F5 BIG-IP APMproduct · 1

Entities are extracted by the model from each article. First seen Sep 23, 2026, last mentioned Sep 24, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.