{"uuid": "9644c8b9-f928-426f-8e17-c492dad4d2da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3281", "content": "\ud83d\udd34 Arista patches actively exploited VeloCloud Orchestrator zero-day\n\nArista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments.\n\nVCO is a cloud-based centralized management platform that helps admins configure, monitor, and manage VeloCloud SD-WANs (Software-Defined Wide Area Networks) and associated edge devices.\n\nTracked as CVE-2026-93952, this maximum-severity flaw stems from an improper input validation weakness and affects VCO deployments where certificate-based authentication from the VeloCloud Edge to VeloCloud Orchestrator (VCO) is configured.", "creation_timestamp": "2026-09-23T21:02:01.000000Z"}