New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups
1. Executive summary Arista disclosed on 22 September 2026 that a new flaw in on-premises VeloCloud Orchestrator (VCO), CVE-2026-93952, is under active exploitation.
22 Sep 2026 · 8 min read
read →