Velocloud Orchestrator (Arista) - vulnerabilities (CVEs)

5 CVEs, 1 in the last 30 days, 29 known versions, newest CVE from 2026-10-22. Vendor: Arista.

CVEs of Velocloud Orchestrator

• CVE-2026-114625 - CVSS 9.9 (critical), 2026-10-22: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact…
• CVE-2026-93952 - CVSS 10 (critical), 2026-09-22: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact…
• CVE-2026-16812 - CVSS 10 (critical), 2026-07-27: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact…
• CVE-2026-31431 - CVSS 7.8 (high), 2026-04-22: In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit…
• CVE-2020-3973 - CVSS 8.8 (high), 2020-07-08: The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud…