https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 24 Sep 2026 14:48:13 +0000 https://vulnerability.circl.lu/sighting/bce9736e-1dba-494a-9bae-bf953f85afce/export {"uuid": "bce9736e-1dba-494a-9bae-bf953f85afce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2sjtsc2q", "content": "Daily IT Security Digest \u2014 2026-09-24\nare no workarounds \u2014 only patching resolves the issue.\nhttps://radar.offseq.com/threat/cisco-warns-ise\n\n## 6. Arista VeloCloud Orchestrator Zero-Day (CVE-2026-93952)\nAn actively exploited critical zero-day in on-premise Arista VeloCloud Orchestrator (versions", "creation_timestamp": "2026-09-24T05:02:27.651708Z"} {"uuid": "bce9736e-1dba-494a-9bae-bf953f85afce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2sjtsc2q", "content": "Daily IT Security Digest \u2014 2026-09-24\nare no workarounds \u2014 only patching resolves the issue.\nhttps://radar.offseq.com/threat/cisco-warns-ise\n\n## 6. Arista VeloCloud Orchestrator Zero-Day (CVE-2026-93952)\nAn actively exploited critical zero-day in on-premise Arista VeloCloud Orchestrator (versions", "creation_timestamp": "2026-09-24T05:02:27.651708Z"} https://vulnerability.circl.lu/sighting/bce9736e-1dba-494a-9bae-bf953f85afce/export Thu, 24 Sep 2026 05:02:27 +0000 https://vulnerability.circl.lu/sighting/9733aea2-b7ff-4ebd-ad50-7cb3f953f95b/export {"uuid": "9733aea2-b7ff-4ebd-ad50-7cb3f953f95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaelzmwpm2g", "content": "\ud83d\udcf0 Arista Rilis Patch untuk Zero-Day VeloCloud Orchestrator yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-93952-velocloud-orchestrator-zero-day/\n\n#arista #cisa #cve #cybersecurity #keamananJaringan #sd-wan #velocloud #velocloudOrchestrator #", "creation_timestamp": "2026-09-24T04:00:30.332733Z"} {"uuid": "9733aea2-b7ff-4ebd-ad50-7cb3f953f95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaelzmwpm2g", "content": "\ud83d\udcf0 Arista Rilis Patch untuk Zero-Day VeloCloud Orchestrator yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-93952-velocloud-orchestrator-zero-day/\n\n#arista #cisa #cve #cybersecurity #keamananJaringan #sd-wan #velocloud #velocloudOrchestrator #", "creation_timestamp": "2026-09-24T04:00:30.332733Z"} https://vulnerability.circl.lu/sighting/9733aea2-b7ff-4ebd-ad50-7cb3f953f95b/export Thu, 24 Sep 2026 04:00:30 +0000 https://vulnerability.circl.lu/sighting/e24d20e4-bc2c-40fa-8d12-3d8dbb9710dd/export {"uuid": "e24d20e4-bc2c-40fa-8d12-3d8dbb9710dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwa7wwfqai2h", "content": "\ud83d\udccc CVE-2026-93952 - VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and... https://www.cyberhub.blog/cves/CVE-2026-93952", "creation_timestamp": "2026-09-24T02:37:07.355107Z"} {"uuid": "e24d20e4-bc2c-40fa-8d12-3d8dbb9710dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwa7wwfqai2h", "content": "\ud83d\udccc CVE-2026-93952 - VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and... https://www.cyberhub.blog/cves/CVE-2026-93952", "creation_timestamp": "2026-09-24T02:37:07.355107Z"} https://vulnerability.circl.lu/sighting/e24d20e4-bc2c-40fa-8d12-3d8dbb9710dd/export Thu, 24 Sep 2026 02:37:07 +0000 https://vulnerability.circl.lu/sighting/9468a1a1-e32e-45e0-a193-1733663bc6bc/export {"uuid": "9468a1a1-e32e-45e0-a193-1733663bc6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://t.me/bdufstecru/3476", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 VeloCloud Orchestrator (VCO) On-Prem \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 VMware SD-WAN by VeloCloud \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-15063\nCVE-2026-93952\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183", "creation_timestamp": "2026-09-23T19:00:05.169959Z"} {"uuid": "9468a1a1-e32e-45e0-a193-1733663bc6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://t.me/bdufstecru/3476", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 VeloCloud Orchestrator (VCO) On-Prem \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 VMware SD-WAN by VeloCloud \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-15063\nCVE-2026-93952\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183", "creation_timestamp": "2026-09-23T19:00:05.169959Z"} https://vulnerability.circl.lu/sighting/9468a1a1-e32e-45e0-a193-1733663bc6bc/export Wed, 23 Sep 2026 19:00:05 +0000 https://vulnerability.circl.lu/sighting/fa82903e-56fa-4692-aa34-26137d3f23ad/export {"uuid": "fa82903e-56fa-4692-aa34-26137d3f23ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mw74pckc6v22", "content": "Arista patched CVE-2026-93952 today, a CVSS 10.0 flaw in VeloCloud Orchestrator letting unauthenticated attackers reach privileged internal functions. Arista says it is actively exploited. Fixes are out for the 5.2 and 6.4 trains; 6.1 and 7.0 are still waiting. CISA added it to KEV.", "creation_timestamp": "2026-09-23T16:06:31.239990Z"} {"uuid": "fa82903e-56fa-4692-aa34-26137d3f23ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mw74pckc6v22", "content": "Arista patched CVE-2026-93952 today, a CVSS 10.0 flaw in VeloCloud Orchestrator letting unauthenticated attackers reach privileged internal functions. Arista says it is actively exploited. Fixes are out for the 5.2 and 6.4 trains; 6.1 and 7.0 are still waiting. CISA added it to KEV.", "creation_timestamp": "2026-09-23T16:06:31.239990Z"} https://vulnerability.circl.lu/sighting/fa82903e-56fa-4692-aa34-26137d3f23ad/export Wed, 23 Sep 2026 16:06:31 +0000 https://vulnerability.circl.lu/sighting/b674cb30-8e0f-4bf4-b668-36b04a182f3a/export {"uuid": "b674cb30-8e0f-4bf4-b668-36b04a182f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74jrobxm2l", "content": "~Cisa~\nCISA added four actively exploited vulnerabilities to its KEV Catalog; prioritize rapid remediation.\n-\nIOCs: CVE-2026-85102, CVE-2026-93616, CVE-2026-93952\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-09-23T16:03:25.682447Z"} {"uuid": "b674cb30-8e0f-4bf4-b668-36b04a182f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74jrobxm2l", "content": "~Cisa~\nCISA added four actively exploited vulnerabilities to its KEV Catalog; prioritize rapid remediation.\n-\nIOCs: CVE-2026-85102, CVE-2026-93616, CVE-2026-93952\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-09-23T16:03:25.682447Z"} https://vulnerability.circl.lu/sighting/b674cb30-8e0f-4bf4-b668-36b04a182f3a/export Wed, 23 Sep 2026 16:03:25 +0000 https://vulnerability.circl.lu/sighting/004d9ee0-7c34-48b7-9212-f73a4a726f2e/export {"uuid": "004d9ee0-7c34-48b7-9212-f73a4a726f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mw6xes6fhr2o", "content": "Arista VeloCloud Orchestrator hits KEV with a max-severity unauthenticated RCE (CVE-2026-93952, CVSS 10.0). CISA deadline\u2026 https://0daynews.com/articles/2026-09-23-arista-velocloud-cve-2026-93952-cvss10-kev/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3403", "creation_timestamp": "2026-09-23T14:31:10.022433Z"} {"uuid": "004d9ee0-7c34-48b7-9212-f73a4a726f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mw6xes6fhr2o", "content": "Arista VeloCloud Orchestrator hits KEV with a max-severity unauthenticated RCE (CVE-2026-93952, CVSS 10.0). CISA deadline\u2026 https://0daynews.com/articles/2026-09-23-arista-velocloud-cve-2026-93952-cvss10-kev/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3403", "creation_timestamp": "2026-09-23T14:31:10.022433Z"} https://vulnerability.circl.lu/sighting/004d9ee0-7c34-48b7-9212-f73a4a726f2e/export Wed, 23 Sep 2026 14:31:10 +0000 https://vulnerability.circl.lu/sighting/35d76918-3138-494d-9580-fe1d5dd99128/export {"uuid": "35d76918-3138-494d-9580-fe1d5dd99128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6tf3qbq322", "content": "\ud83e\udd16 CVE-2026-93952: actively exploited zero-day in Arista VeloCloud Orchestrator. Remote, low-complexity, no credentials needed \u2014 improper input validation in cert-based auth. Listed in CISA KEV, patch by Sep\u2026", "creation_timestamp": "2026-09-23T13:19:44.205773Z"} {"uuid": "35d76918-3138-494d-9580-fe1d5dd99128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6tf3qbq322", "content": "\ud83e\udd16 CVE-2026-93952: actively exploited zero-day in Arista VeloCloud Orchestrator. Remote, low-complexity, no credentials needed \u2014 improper input validation in cert-based auth. Listed in CISA KEV, patch by Sep\u2026", "creation_timestamp": "2026-09-23T13:19:44.205773Z"} https://vulnerability.circl.lu/sighting/35d76918-3138-494d-9580-fe1d5dd99128/export Wed, 23 Sep 2026 13:19:44 +0000 https://vulnerability.circl.lu/sighting/3761dbf6-e228-4774-a6a6-0ef763c18f0d/export {"uuid": "3761dbf6-e228-4774-a6a6-0ef763c18f0d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec6923e9-01bf-4e63-b522-ee4566299eb4", "content": "", "creation_timestamp": "2026-09-23T11:00:59.522693Z"} {"uuid": "3761dbf6-e228-4774-a6a6-0ef763c18f0d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec6923e9-01bf-4e63-b522-ee4566299eb4", "content": "", "creation_timestamp": "2026-09-23T11:00:59.522693Z"} https://vulnerability.circl.lu/sighting/3761dbf6-e228-4774-a6a6-0ef763c18f0d/export Wed, 23 Sep 2026 11:00:59 +0000 https://vulnerability.circl.lu/sighting/66b489ba-ccbe-41b8-9528-e55509e3da0f/export {"uuid": "66b489ba-ccbe-41b8-9528-e55509e3da0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw6jwdjcam27", "content": "Arista released urgent patches for CVE-2026-93952, a critical exploited zero-day in VeloCloud Orchestrator On-Prem that can expose privileged internal functions and impact confidentiality, integrity, and availability. #Arista #VeloCloud #CVE202693952", "creation_timestamp": "2026-09-23T10:30:26.070351Z"} {"uuid": "66b489ba-ccbe-41b8-9528-e55509e3da0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw6jwdjcam27", "content": "Arista released urgent patches for CVE-2026-93952, a critical exploited zero-day in VeloCloud Orchestrator On-Prem that can expose privileged internal functions and impact confidentiality, integrity, and availability. #Arista #VeloCloud #CVE202693952", "creation_timestamp": "2026-09-23T10:30:26.070351Z"} https://vulnerability.circl.lu/sighting/66b489ba-ccbe-41b8-9528-e55509e3da0f/export Wed, 23 Sep 2026 10:30:26 +0000