Arista Networks (Vendor): news timeline & CVEs

Arista Networks security advisory (AV26-947)

Canada's Cyber Centre warns CVE-2026-93952 in Arista VeloCloud Orchestrator is being exploited in the wild.

The Canadian Centre for Cyber Security issued AV26-947 on 22 September 2026 for Arista VeloCloud Orchestrator. Affected on-prem ranges are 5.2.0 through 5.2.3.15, 6.1.0 through 6.1.3.7, 6.4.0 through 6.4.2.7, and 7.0.0 through 7.0.0.2. Open-source reporting indicates CVE-2026-93952 is being exploited in the wild. Administrators are urged to review Arista Security Advisory 0183 and apply updates.

Canadian Centre for Cyber Securityupdated Sep 24, 13:35 UTC · 2d agofirst Sep 22, 13:14 UTC · 5d agoExploit / PoC in the wild 5 sources CVE-2026-93952

Arista Networks security advisory (AV26-940)

Canadian Cyber Centre relays Arista Networks Security Advisory 0174 covering multiple vulnerabilities in EOS across several versions and platforms.

The Canadian Centre for Cyber Security issued advisory AV26-940 noting that, as of September 9, 2026, Arista Networks EOS is affected by vulnerabilities across multiple versions and platforms, per Arista Security Advisory 0174. Users and administrators are encouraged to review the advisory links and apply updates as they become available.

Canadian Centre for Cyber SecuritySep 18, 17:29 UTC · 8d agoAdvisory

Arista Networks

Timeline2 articles

Related CVEsby mentions

Appears with

Arista Networks security advisory (AV26-947)

Arista Networks security advisory (AV26-940)