{"cve":{"cve_id":"CVE-2026-93952","is_kev":true,"kev_date_added":"2026-09-22","kev_vendor_project":"Arista","kev_product":"VeloCloud Orchestrator","kev_vulnerability_name":"Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","kev_short_description":"Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.","kev_required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","kev_due_date":"2026-09-25","kev_known_ransomware":false,"kev_notes":"https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93952","kev_cwes":["CWE-20"],"epss_score":0.01062,"epss_percentile":0.63955,"epss_as_of":"2026-10-15","description":"VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.\n\nHosted, including Dedicated, versions of VCO were impacted and have already been patched.","published_at":"2026-09-22T07:37:24.300000Z","last_modified_at":"2026-09-23T14:32:12.417000Z","cvss_v3_score":10.0,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cvss_v3_severity":"CRITICAL","cvss_v4_score":9.5,"cvss_v4_vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","cvss_v4_severity":"CRITICAL","ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-20"],"nvd_references":["https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183"],"vuln_status":"Analyzed","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-09-22T09:33:11.669815Z","updated_at":"2026-09-24T15:44:00.920957Z"},"effective_severity":"CRITICAL","badges":["kev","news"],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"C","value_label":"Changed"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":"4.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"H","value_label":"High"},{"metric":"AT","name":"Attack Requirements","value":"N","value_label":"None"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"VC","name":"Confidentiality (Vulnerable System)","value":"H","value_label":"High"},{"metric":"VI","name":"Integrity (Vulnerable System)","value":"H","value_label":"High"},{"metric":"VA","name":"Availability (Vulnerable System)","value":"H","value_label":"High"},{"metric":"SC","name":"Confidentiality (Subsequent System)","value":"H","value_label":"High"},{"metric":"SI","name":"Integrity (Subsequent System)","value":"H","value_label":"High"},{"metric":"SA","name":"Availability (Subsequent System)","value":"H","value_label":"High"}]},"affected":[{"vendor_slug":"arista","vendor_name":"Arista","product_slug":"velocloud-orchestrator","product_name":"velocloud_orchestrator","version_start":"5.2.0","version_start_inclusive":true,"version_end":"5.2.3.16","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:arista:velocloud_orchestrator:*:*:*:*:*:*:*:*"},{"vendor_slug":"arista-networks","vendor_name":"Arista Networks","product_slug":"velocloud-orchestrator-vco-on-prem","product_name":"VeloCloud Orchestrator (VCO) On-Prem","version_start":"5.2.0","version_start_inclusive":true,"version_end":"5.2.3.15","version_end_inclusive":true,"cpe23_uri":"cve5:arista-networks:velocloud-orchestrator-vco-on-prem:5.2.0:5.2.3.15"},{"vendor_slug":"arista-networks","vendor_name":"Arista Networks","product_slug":"velocloud-orchestrator-vco-on-prem","product_name":"VeloCloud Orchestrator (VCO) On-Prem","version_start":"6.1.0","version_start_inclusive":true,"version_end":"6.1.3.7","version_end_inclusive":true,"cpe23_uri":"cve5:arista-networks:velocloud-orchestrator-vco-on-prem:6.1.0:6.1.3.7"},{"vendor_slug":"arista-networks","vendor_name":"Arista Networks","product_slug":"velocloud-orchestrator-vco-on-prem","product_name":"VeloCloud Orchestrator (VCO) On-Prem","version_start":"6.4.0","version_start_inclusive":true,"version_end":"6.4.2.7","version_end_inclusive":true,"cpe23_uri":"cve5:arista-networks:velocloud-orchestrator-vco-on-prem:6.4.0:6.4.2.7"},{"vendor_slug":"arista-networks","vendor_name":"Arista Networks","product_slug":"velocloud-orchestrator-vco-on-prem","product_name":"VeloCloud Orchestrator (VCO) On-Prem","version_start":"7.0.0","version_start_inclusive":true,"version_end":"7.0.0.2","version_end_inclusive":true,"cpe23_uri":"cve5:arista-networks:velocloud-orchestrator-vco-on-prem:7.0.0:7.0.0.2"}],"exploit_refs":[],"news":[{"id":2023,"source":"The Hacker News","url":"https://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html","title":"New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups","summary":"Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on September 22.\n\nThe flaw, tracked as CVE-2026-93952, may allow a remote attacker with no login access to privilege internal functions and affect the VCO host. Only orchestrators set up to authenticate their Edges with certificates are","thumbnail_url":"https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhN5Up_REU7_SnA-Ce9D8UGRsM8WbkkcjR6kjirzb-tSFejrL-qnZkXrp2gNa3OA-4PgvkUqHs59j9Qc8srbfm2JOUIOvEa1c_d8Il3kUDAGyr49FuXwq_n438Vf9txfq1fVwcpykkZAKz1o2QFGUJDLF4wnXzNWLdH1tYft3bd-vJywPppGjEfoikG22s/s1600/VeloCloud.jpg","author":"info@thehackernews.com (The Hacker News)","published_at":"2026-09-22T12:29:00Z","fetched_at":"2026-09-22T14:01:11.950235Z","trending_score":9.046850354596177e-6,"cve_ids":["CVE-2026-93952"]}],"references":[{"url":"https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183","source_type":"VENDOR_ADVISORY","tags":["advisory"]}],"timeline":[{"type":"cisa_reported","at":"2026-09-22T00:00:00Z","label":"Added to CISA KEV catalog","source":"kev"},{"type":"published","at":"2026-09-22T07:37:24.300000Z","label":"CVE published","source":null},{"type":"first_article","at":"2026-09-22T12:29:00Z","label":"First news coverage","source":"The Hacker News"}]}