What’s Vulnerable › Products

Arista Networks VeloCloud Orchestrator On-Prem vulnerabilities

7 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Arista Networks VeloCloud Orchestrator On-Prem version is affected

Exploited Arista Networks VeloCloud Orchestrator On-Prem vulnerabilities

• CVE-2026-114625 — Arista VeloCloud Orchestrator SQL Injection Vulnerability
• CVE-2026-93952 — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
• CVE-2026-16812 — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
• CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

Latest Arista Networks VeloCloud Orchestrator On-Prem vulnerabilities

• CVE-2026-114625 — Arista VeloCloud Orchestrator SQL Injection Vulnerability (CVSS 9.9) — exploited
• CVE-2026-93952 — Arista VeloCloud Orchestrator Improper Input Validation Vulnerability (CVSS 10.0) — exploited
• CVE-2026-17192 — VeloCloud Orchestrator Missing Input Validation SSRF (CVSS 8.5)
• CVE-2026-17191 — VeloCloud Orchestrator Flow Metrics API SQL Injection (CVSS 9.1)
• CVE-2026-16812 — Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability (CVSS 10.0) — exploited
• CVE-2026-31431 — Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability (CVSS 7.8) — exploited
• CVE-2020-3973 — (CVSS 8.8)