Vendor

Arista Networks

4 of 6 Arista Networks CVEs in Patchfirst (67%) are in of vulnerabilities exploited in the wild.

CVEs: 6
In CISA KEV: 467%
Known ransomware use: 0
Median days to KEV: 0; from publication
Latest KEV listing: 23 Oct 2026

Watch Arista Networks Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
VeloCloud Orchestrator In KEV: 3 CVEs: 3
Extensible Operating System In KEV: 1 CVEs: 1
CloudVision CUE In KEV: 0 CVEs: 1
CloudVision Portal In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Arista Networks CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 4
T1068Exploitation for Privilege Escalation CVEs: 2
T1078Valid Accounts CVEs: 1
T1599Network Boundary Bridging CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/arista.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Arista Networks CVEs linked to the technique. Each link’s provenance is on the CVE page.

Arista Networks CVEs

6 CVEs, by priority

CVE-2026-114625Arista VeloCloud Orchestrator SQL Injection Vulnerability
Arista · VeloCloud OrchestratorKEVPublic exploitCritical · 9.9T1078Valid Accounts T1190Exploit Public-Facing Application+1 more
1.0%Top 36%
72.5priority
CVE-2026-93952Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista · VeloCloud OrchestratorKEVCritical · 10.0T1190Exploit Public-Facing Application T1068Exploitation for Privilege Escalation
1.4%Top 28%
69.4priority
CVE-2026-16812Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability
Arista · VeloCloud OrchestratorKEVCritical · 10.0T1190Exploit Public-Facing Application
1.8%Top 22%
65.6priority
CVE-2026-7473Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability
Arista · Extensible Operating SystemKEVPublic exploitMedium · 5.8T1190Exploit Public-Facing Application T1599Network Boundary Bridging
1.1%Top 34%
65.2priority
CVE-2026-101155An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond…
Arista Networks · CloudVision PortalCritical · 9.1
0.6%Top 53%
17.9priority
CVE-2026-102159An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality…
Arista Networks · CloudVision CUECritical · 9.8
0.4%Top 70%
15.1priority