[ Vendor · 5 CVEs ]
Arista
CVEs affecting Arista published in the last 30 days, plus any Arista CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-93952 | 22 Sep 2026 | CVSS 10.0 | Arista VeloCloud Orchestrator Improper Input ValidationVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality… | Exploited |
| CVE-2026-16812 | 27 Jul 2026 | CVSS 10.0 | Arista VeloCloud Orchestrator On-Prem OS Command InjectionVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality… | Exploited |
| CVE-2026-7473 | 5 Jun 2026 | CVSS 5.8 | Arista Extensible Operating System Incomplete Comparison with Missing FactorsOn affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE… | Exploited |
| CVE-2014-7169 | 25 Sep 2014 | CVSS 9.8 | GNU Bourne-Again Shell (Bash) Arbitrary Code ExecutionGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which… | ExploitedFix |
| CVE-2014-6271 | 24 Sep 2014 | CVSS 9.8 | GNU Bourne-Again Shell (Bash) Arbitrary Code ExecutionGNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to… | ExploitedFix |