{"revision":"05dfe8a2dacd40b9b024c1305d4bb226","evidence":{"cve":"CVE-2026-93952","kev":{"cve":"CVE-2026-93952","product":"VeloCloud Orchestrator","name":"Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","dateAdded":"2026-09-22","dueDate":"2026-09-25","knownRansomwareUse":false,"shortDescription":"Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.","vendor":"Arista","isMicrosoft":false,"products":[],"advisoryUrl":"https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93952","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-93952"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"5cdc98efdb9b9399b073cdcc"}}