Patchfirst: Arista Networks vulnerabilitieshttps://patchfirst.co/vendor/arista/New and newly exploited Arista Networks CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMT[KEV] CVE-2026-114625: Arista VeloCloud Orchestrator SQL Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-114625/CVE-2026-114625#kevFri, 23 Oct 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-10-23. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.5% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application. Priority 72.5 of 100.kevpublic-exploitT1078T1068T1190CVE-2026-101155: An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond…https://patchfirst.co/cve/CVE-2026-101155/CVE-2026-101155Tue, 06 Oct 2026 00:00:00 GMTArista Networks · CloudVision Portal. Not in CISA KEV. EPSS 0.6% (higher than 46.9% of CVEs). CVSS 9.1 CRITICAL. Priority 17.9 of 100.CVE-2026-102159: An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality…https://patchfirst.co/cve/CVE-2026-102159/CVE-2026-102159Tue, 06 Oct 2026 00:00:00 GMTArista Networks · CloudVision CUE. Not in CISA KEV. EPSS 0.4% (higher than 30.2% of CVEs). CVSS 9.8 CRITICAL. Priority 15.1 of 100.[KEV] CVE-2026-93952: Arista VeloCloud Orchestrator Improper Input Validation Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-93952/CVE-2026-93952#kevTue, 22 Sep 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 69.4 of 100.kevT1190T1068[KEV] CVE-2026-16812: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-16812/CVE-2026-16812#kevMon, 27 Jul 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-07-27. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application. Priority 65.6 of 100.kevT1190[KEV] CVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerabilityhttps://patchfirst.co/cve/CVE-2026-7473/CVE-2026-7473#kevTue, 09 Jun 2026 00:00:00 GMTArista · Extensible Operating System. In CISA KEV since 2026-06-09. ENISA EUVD lists it as exploited. EPSS 1.1% (higher than 65.8% of CVEs). CVSS 5.8 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1599 Network Boundary Bridging. Priority 65.2 of 100.kevpublic-exploitT1190T1599