#arista
3 articles
Security Alerts Nov 10, 2026
CVE-2026-121289: Stack Overflow in Arista EOS BGP Agent
A crafted packet can crash the BGP agent on Arista EOS with BGP configured, dropping all BGP sessions on the device. A sophisticated attacker may also achieve code execution...
Security Alerts Oct 22, 2026
CVE-2026-114625: Privilege Escalation in Arista VeloCloud Orchestrator
In on-prem VeloCloud Orchestrator (VCO), any authenticated user can gain operator privileges and masquerade as the local "superuser operator". The flaw is being actively exploited...
Security Alerts Sep 22, 2026
CVE-2026-93952: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability
Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Su...