Arista (Vendor): news timeline & CVEs

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

CISA adds four actively exploited zero-days to KEV, forcing immediate patching of critical flaws in Check Point, Arista, and F5 systems.

CISA has added four actively exploited zero-day vulnerabilities to its KEV catalog, forcing US federal agencies to patch by September 25. The list includes critical flaws in Check Point Security Management (CVE-2026-93616) and Security Gateway (CVE-2026-85102), alongside zero-days in Arista VeloCloud Orchestrator (CVE-2026-93952) and F5 BIG-IP APM (CVE-2026-94127). Check Point confirmed exploitation against Management Servers and Spark firewalls globally.

Help Net Securityupdated Sep 25, 10:30 UTC · 1d agofirst Sep 23, 10:22 UTC · 3d agoVulnerability in the wild 15 sources CVE-2026-93616 CVE-2026-85102 CVE-2026-93952+1 CVEs

Arista Urges Immediate Patching of Exploited VCO Zero-Day

Arista patched actively exploited VeloCloud Orchestrator zero-day CVE-2026-93952, now listed in CISA's KEV catalog.

Arista released urgent patches for CVE-2026-93952, a CVSS 10 improper-input-validation zero-day in on-premises VeloCloud Orchestrator that can let remote attackers reach privileged internal functions. The company says the externally discovered flaw is actively exploited, requires network access to the VCO web interface and the public edge authentication certificate, and does not need tenant or operator credentials. Fixes are available in versions 5.2.3.16 and 6.4.2.8. CISA added the bug to the Known Exploited Vulnerabilities catalog and gave federal agencies three days to patch; Arista says there are no definitive indicators of compromise.

SecurityWeekupdated Sep 24, 13:35 UTC · 2d agofirst Sep 23, 08:33 UTC · 4d agoExploit / PoC in the wild 5 sources CVE-2026-93952

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

Attackers are exploiting a CVSS 10.0 flaw in on-premises Arista VeloCloud Orchestrator deployments that use certificate authentication.

Arista said attackers are exploiting CVE-2026-93952, a CVSS 10.0 flaw in on-premises VeloCloud Orchestrator when Edges authenticate with certificates. An unauthenticated remote attacker who can reach the VCO web interface and knows the public part of an Edge certificate can invoke internal functions and compromise the orchestrator and managed Edge devices. Fixes are available for the 5.2 train from 5.2.3.16 and the 6.4 train from 6.4.2.8; 6.1 and 7.0 have no fix yet. Hosted and Dedicated VCO are already patched, and Arista published indicators including vc-sysmond and IPs 142.93.149.77 and 104.248.126.159.

The Hacker Newsupdated Sep 24, 13:35 UTC · 2d agofirst Sep 22, 12:29 UTC · 4d agoExploit / PoC in the wild 5 sources CVE-2026-93952 CVE-2026-16812

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA added four actively exploited Check Point, Arista VeloCloud, and F5 BIG-IP flaws to the KEV catalog.

On 2026-09-22, CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog based on evidence of active exploitation. They are CVE-2026-85102 (Check Point improper certificate validation), CVE-2026-93616 (Check Point path traversal), CVE-2026-93952 (Arista VeloCloud Orchestrator improper input validation), and CVE-2026-94127 (F5 BIG-IP APM heap-based buffer overflow). Binding Operational Directive 26-04 requires federal civilian agencies to prioritize remediation of high-risk KEV entries on exposed assets. CISA encourages all organizations to remediate these cataloged flaws quickly.

CISA AdvisoriesSep 22, 12:00 UTC · 4d agoExploit / PoC in the wildCVE-2026-85102 CVE-2026-93616 CVE-2026-93952+1 CVEs

Arista

Timeline4 articles

Related CVEsby mentions

Appears with

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

Arista Urges Immediate Patching of Exploited VCO Zero-Day

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

CISA Adds Four Known Exploited Vulnerabilities to Catalog