Free practical cybersecurity guidance for organisations without a security team.
hello@actionsoncyber.com
Actions On Cyber logo
Contact
← Back to Vulnerability Briefs

Critical Security Flaw Found in Arista VeloCloud Orchestrator

A serious security weakness has been found in Arista's VeloCloud Orchestrator software, which is used to manage network connections. This flaw could let attackers access sensitive parts of the system remotely, potentially leading to data loss or disruption. The issue is actively being exploited, so it is important to act quickly if you use this software.

23 September 2026

Reference: CVE-2026-93952

1. What is being reported?

The report highlights a critical vulnerability in the on-premises version of Arista's VeloCloud Orchestrator. This software helps manage network traffic and connections. The flaw allows attackers to bypass security controls and gain privileged access to the system, which could compromise the data and services it manages. Cloud-hosted versions have already been patched.

2. What this means in plain English

If your organisation uses this software on-site, attackers could remotely take control or disrupt your network management, risking loss or theft of data and service outages. This could affect your business operations and the security of your information.

3. Could this affect a small business?

Small organisations using the on-premises version of VeloCloud Orchestrator could be at risk. If you use a cloud-hosted or dedicated version, patches have already been applied. If you do not use this product at all, you are not affected.

4. What to do now

  • Check if your organisation uses Arista VeloCloud Orchestrator on-premises.
  • If yes, contact your IT provider immediately to confirm if the latest security updates or mitigations have been applied.
  • Follow any vendor instructions carefully to apply patches or workarounds as soon as possible.
  • If you use a cloud-hosted version, verify with your provider that patches have been applied or consider discontinuing use if mitigations are not available.

5. Ask your IT provider

Can you confirm whether our Arista VeloCloud Orchestrator on-premises installation has been patched against the CVE-2026-93952 vulnerability, and what steps are in place to protect us from this known exploited flaw?

6. Bottom line

If you use Arista VeloCloud Orchestrator on-site, act quickly to ensure it is patched to avoid serious security risks.

Information based on CISA KEV, NVD, and reputable security news reports.

Back to Vulnerability Briefs