{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Arista Networks vulnerabilities","home_page_url":"https://patchfirst.co/vendor/arista/","feed_url":"https://patchfirst.co/feed/vendor/arista.json","description":"New and newly exploited Arista Networks CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-114625#kev","url":"https://patchfirst.co/cve/CVE-2026-114625/","title":"[KEV] CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Vulnerability","content_text":"Arista · VeloCloud Orchestrator. In CISA KEV since 2026-10-23. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.5% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application. Priority 72.5 of 100.","summary":"Arista VeloCloud Orchestrator SQL Injection Vulnerability","date_published":"2026-10-23T00:00:00.000Z","date_modified":"2026-10-26T13:10:00.000Z","tags":["kev","public-exploit","T1078","T1068","T1190"],"_patchfirst":{"reason":"kev","priority":72.5,"kev":{"dateAdded":"2026-10-23","ransomware":false},"epss":{"score":0.01025,"percentile":0.63541},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Arista","product":"VeloCloud Orchestrator","techniqueIds":["T1078","T1068","T1190"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-101155","url":"https://patchfirst.co/cve/CVE-2026-101155/","title":"CVE-2026-101155: An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond…","content_text":"Arista Networks · CloudVision Portal. Not in CISA KEV. EPSS 0.6% (higher than 46.9% of CVEs). CVSS 9.1 CRITICAL. Priority 17.9 of 100.","summary":"An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-07T13:38:48.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.9,"kev":null,"epss":{"score":0.00564,"percentile":0.46859},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Arista Networks","product":"CloudVision Portal","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-102159","url":"https://patchfirst.co/cve/CVE-2026-102159/","title":"CVE-2026-102159: An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality…","content_text":"Arista Networks · CloudVision CUE. Not in CISA KEV. EPSS 0.4% (higher than 30.2% of CVEs). CVSS 9.8 CRITICAL. Priority 15.1 of 100.","summary":"An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-07T13:38:48.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.1,"kev":null,"epss":{"score":0.00363,"percentile":0.30174},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Arista Networks","product":"CloudVision CUE","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-93952#kev","url":"https://patchfirst.co/cve/CVE-2026-93952/","title":"[KEV] CVE-2026-93952: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","content_text":"Arista · VeloCloud Orchestrator. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 69.4 of 100.","summary":"Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","date_published":"2026-09-22T00:00:00.000Z","date_modified":"2026-09-23T14:32:12.000Z","tags":["kev","T1190","T1068"],"_patchfirst":{"reason":"kev","priority":69.4,"kev":{"dateAdded":"2026-09-22","ransomware":false},"epss":{"score":0.01384,"percentile":0.72172},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Arista","product":"VeloCloud Orchestrator","techniqueIds":["T1190","T1068"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-16812#kev","url":"https://patchfirst.co/cve/CVE-2026-16812/","title":"[KEV] CVE-2026-16812: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability","content_text":"Arista · VeloCloud Orchestrator. In CISA KEV since 2026-07-27. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application. Priority 65.6 of 100.","summary":"Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability","date_published":"2026-07-27T00:00:00.000Z","date_modified":"2026-10-24T13:10:00.000Z","tags":["kev","T1190"],"_patchfirst":{"reason":"kev","priority":65.6,"kev":{"dateAdded":"2026-07-27","ransomware":false},"epss":{"score":0.0176,"percentile":0.77972},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Arista","product":"VeloCloud Orchestrator","techniqueIds":["T1190"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-7473#kev","url":"https://patchfirst.co/cve/CVE-2026-7473/","title":"[KEV] CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability","content_text":"Arista · Extensible Operating System. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 65.8% of CVEs). CVSS 5.8 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1599 Network Boundary Bridging. Priority 65.2 of 100.","summary":"Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability","date_published":"2026-06-09T00:00:00.000Z","date_modified":"2026-10-25T23:10:00.000Z","tags":["kev","public-exploit","T1190","T1599"],"_patchfirst":{"reason":"kev","priority":65.2,"kev":{"dateAdded":"2026-06-09","ransomware":false},"epss":{"score":0.01108,"percentile":0.65833},"cvss":{"score":5.8,"severity":"MEDIUM","version":"3.1"},"vendor":"Arista","product":"Extensible Operating System","techniqueIds":["T1190","T1599"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}