Vulnpedia
← All CVEs

CVE-2026-93952

CRITICAL 9.5 KNOWN EXPLOITED

Published 2026-09-22 · Last modified 2026-09-23

VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Hosted, including Dedicated, versions of VCO were impacted and have already been patched.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2026-09-22. Patch or mitigate now.

Exploitation likelihood

1.1%chance of exploitation in 30 days · 64th percentile

● In CISA KEV (2026-09-22) ○ Public exploit / PoC

Impact if exploited

9.5CVSS 4.0 · CRITICAL

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ✓Privileges: No account or privileges required
  • ✓User interaction: No user interaction needed
  • ⚠Complexity: Needs a race window or specific setup
  • ✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept & exploit code

Test against your own equipment

curl -s https://vulnpedia.com/cve/CVE-2026-93952/poc.jsonMachine-readable PoC index for this CVE (for automation).

Listed for defensive triage, patch verification, and authorized testing on systems you own. Machine-readable: /cve/CVE-2026-93952/poc.json

Affected

Vendors Arista Networks Arista

Products Velocloud Orchestrator (Vco) On Prem Velocloud Orchestrator

Weakness (CWE)

  • CWE-20: Improper Input Validation

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Known Affected Software Configurations

VendorProductVersion range
AristaVelocloud Orchestrator≥ 5.2.0 and < 5.2.3.16
AristaVelocloud Orchestrator≥ 6.1.0 and ≤ 6.1.3.7
AristaVelocloud Orchestrator≥ 6.4.0 and < 6.4.2.8
AristaVelocloud Orchestrator≥ 7.0.0 and ≤ 7.0.0.2

All CVSS metrics

  • CRITICAL 10 v3.1 · CNA Primary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
  • CRITICAL 9.5 v4.0 · CNA Primary
    CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
  • CRITICAL 9.5 v4.0 · NVD Secondary
    CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • CRITICAL 10 v3.1 · NVD Secondary
    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

Patches & mitigations

Advisories

Sources: NVD · CVE.org · EPSS