CVE-2026-93952

Critical Arista VeloCloud Orchestrator Zero-Day Exploited to Hijack SD-WAN Edge Gateways CVE-2026-93952

Arista confirms active in-the-wild exploitation of CVSS 10.0 CVE-2026-93952, allowing unauthenticated attackers to hijack on-prem VeloCloud Orchestrators.