{"vulnerability": "CVE-2026-93952", "sightings": [{"uuid": "b93189c0-0d74-42d0-acfb-fc5e3ea127ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw3qipnnvk2t", "content": "CVE-2026-93952 - velocloud orchestrator (vco) on-prem\nThe on\u2011premises VeloCloud Orchestrator may let an attacker from outside reach privileged functions inside the system. This could let them view, change, or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#aristanetworks #CVE #infosec", "creation_timestamp": "2026-09-22T07:50:05.740750Z"}, {"uuid": "d59fabdf-96b9-49da-ade7-692d3ee3b682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117313871866403815", "content": "CVE-2026-93952 (CRITICAL, CVSS 10) impacts Arista VeloCloud Orchestrator (On-Prem) via improper input validation. Remote, unauthenticated access may lead to full system compromise. Patch urgently. https://radar.offseq.com/threat/cve-2026-93952-cwe-20-improper-input-validation-in-arista-networks-velocloud-orchestrator-vco-on-prem-25dafe8f246f1077 #OffSeq #CVE #infosec #Vulnerability", "creation_timestamp": "2026-09-22T09:00:25.719455Z"}, {"uuid": "670ec92f-1e3c-4b37-8711-280060106b3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw3ugjugqx2x", "content": "CVE-2026-93952 (CRITICAL) affects Arista VeloCloud Orchestrator (On-Prem). Remote exploit enables total system compromise. Update vulnerable versions ASAP. https://radar.offseq.com/threat/cve-2026-93952-cwe-20-improper-input-validation-in-arista-networks-velocloud-orchestrator-vco-on-prem-25dafe8...", "creation_timestamp": "2026-09-22T09:00:28.266661Z"}, {"uuid": "e1c199c4-9c51-41e7-a193-b375cbbf6dc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw3y62xxzp24", "content": "\ud83d\udea8 CVE-2026-93952 \u2014 CVSS 9.5 CRITICAL\n\nVeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to a...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93952\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T10:07:17.858496Z"}, {"uuid": "27524b50-764a-4a08-8755-c1f30bd3592e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mw4edsk3ni26", "content": "CVE-2026-93952 enables unauthenticated remote attackers to gain internal privileges on on-premises VeloCloud Orchestrator, potentially compromising orchestrator and managed Edge devices.\n", "creation_timestamp": "2026-09-22T13:45:16.663110Z"}, {"uuid": "8dbd3340-842a-463c-9cd3-353ff7eb532e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/privpros.bsky.social/post/3mw4eabsldf23", "content": "CVE-2026-93952 enables unauthenticated remote attackers to gain internal privileges on on-premises VeloCloud Orchestrator, potentially compromising orchestrator and managed Edge devices.\n", "creation_timestamp": "2026-09-22T13:43:17.857700Z"}, {"uuid": "3f040dea-e5e8-4857-8697-c35e2ec358e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mw4eeezabs22", "content": "CVE-2026-93952 enables unauthenticated remote attackers to gain internal privileges on on-premises VeloCloud Orchestrator, potentially compromising orchestrator and managed Edge devices.\n", "creation_timestamp": "2026-09-22T13:45:35.729398Z"}, {"uuid": "686fb5ba-91dd-4f3f-aa63-892227e1d271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mw4fiseraa2l", "content": "Arista disclosed a critical flaw (CVE-2026-93952) in on-premises VeloCloud Orchestrator (VCO) actively exploited as of September 22. The vulnerability, with [\u2026]", "creation_timestamp": "2026-09-22T14:05:57.714965Z"}, {"uuid": "0878f34c-c2f4-4e3d-8d2c-5e357fd8ad6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mw4fst3dsa25", "content": "Arista Confirms: CVE-2026-93952 in VeloCloud Actively Exploited", "creation_timestamp": "2026-09-22T14:11:32.951989Z"}, {"uuid": "9e9075ae-8741-4290-9485-cbd918db6747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw4i6oq3qf2p", "content": "\ud83e\udd16 CVE-2026-93952 (CVSS 10.0): actively exploited flaw in on-prem VeloCloud Orchestrator gives unauthenticated remote attackers access to internal functions (certificate-based Edge auth setups).\nhttps://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html", "creation_timestamp": "2026-09-22T14:53:58.801558Z"}, {"uuid": "5237bb0e-d890-4d0f-afa9-150d0ed13629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html", "content": "Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on September 22.\n\nThe flaw, tracked as CVE-2026-93952, may allow a remote attacker with no login access to privilege internal functions and affect the VCO host. Only orchestrators set up to authenticate their Edges with certificates are", "creation_timestamp": "2026-09-22T16:00:43.362268Z"}, {"uuid": "240796be-be84-4082-893c-1010c0d342bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/arista-networks-security-advisory-av26-947", "content": "", "creation_timestamp": "2026-09-22T16:15:32.234080Z"}, {"uuid": "c953d9af-87a0-43b4-83db-e92a75b89c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://infosec.exchange/ap/users/117064736050780246/statuses/117315207195568331", "content": "Arista disclosed active exploitation of CVE-2026-93952, a CVSS 10.0 unauthenticated flaw in on-prem VeloCloud Orchestrator with certificate authentication enabled. Compromise of the management plane risks full SD-WAN Edge control and lateral movement. Isolate exposed instances and hunt for abuse. #VeloCloud #ThreatIntel #InfoSec\nhttps://cyberworldops.eu/en/active-attacks-target-certificate-enabled-velocloud-orchestrator", "creation_timestamp": "2026-09-22T19:07:39.642184Z"}, {"uuid": "4dd3dfa2-d14f-4aba-a819-d3d5792801bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://infosec.exchange/users/cloud/statuses/117315260462773075", "content": "\ud83e\udd16 CVE-2026-93952 (CVSS 10.0): actively exploited flaw in on-prem VeloCloud Orchestrator lets unauthenticated remote attackers reach internal functions. Affects setups with certificate-based Edge auth (Arista, Sep 22).\n\ud83d\udd17 https://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html#CVE #Exploit #CyberSec", "creation_timestamp": "2026-09-22T19:07:41.467003Z"}, {"uuid": "3254c815-b45d-4c31-991a-19b5fc7b243b", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/47b4bcc3-f667-4db7-8927-129085a9dcf6", "content": "", "creation_timestamp": "2026-09-22T20:00:03.294660Z"}, {"uuid": "918a3ae3-a616-4eb0-8df9-85c015690ccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mw4zj5grct25", "content": "\ud83d\uded1 CVE-2026-93952\nArista VeloCloud Orchestrator\nCVSS 9.5 / EPSS 0% / KEV: No\nTL;DR: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue ma\u2026\nhttps://cvesentinel.com/report/CVE-2026-93952?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-22T20:04:04.809169Z"}, {"uuid": "373c413f-28a4-4293-b99e-5ef02ef348f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://infosec.exchange/ap/users/115741367687413652/statuses/117317048129094181", "content": "Completing our tour of new known-exploited vulns today, here is Arista's perfect-10.\nhttps://ifin.network/t/arista-cve-2026-93952-auth-bypass-exploited-in-the-wild/856\n#ThreatIntel #ThreatIntelligence #IFIN", "creation_timestamp": "2026-09-22T22:28:24.082733Z"}, {"uuid": "3ff06586-baed-4a0d-8f2b-65672f95ed42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mw5ddl7oil2d", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-93952: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-93952", "creation_timestamp": "2026-09-22T22:59:53.854371Z"}, {"uuid": "ecebbaa9-e118-4a5f-813d-ceda257c7f81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mw64jhoe5j2q", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-93952: \u26a0\ufe0f CVE-2026-93952: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.4%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-93952-velocloud-orchestrator-vco-on-prem-has-a", "creation_timestamp": "2026-09-23T06:30:34.806522Z"}, {"uuid": "c19b68a8-a360-47b6-9c69-dbeb6202dcf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mw64u4bjl22l", "content": "Top 3 CVE for last 7 days:\nCVE-2026-86296: 24 interactions\nCVE-2026-76460: 23 interactions\nCVE-2026-58704: 21 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-86296: 24 interactions\nCVE-2026-7273: 20 interactions\nCVE-2026-93952: 11 interactions\n", "creation_timestamp": "2026-09-23T06:36:32.219900Z"}, {"uuid": "0c9279d5-7e02-4f65-8007-43edbab98cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mw6drdiexl2m", "content": "Arista confirmed active exploitation of a CVSS 10 VeloCloud Orchestrator vulnerability (CVE-2026-93952) affecting certificate-based SD-WAN setups. Patch now.\n\n#VeloCloud #Arista #CVE202693952 #SDWAN #Vulnerability #CyberSecurity", "creation_timestamp": "2026-09-23T08:40:15.745572Z"}, {"uuid": "6206f815-ee16-4da8-a2f8-cf8b048a94e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mw6dtwje5b2q", "content": "Arista released urgent patches for a zero-day CVE-2026-93952 in on-prem VeloCloud Orchestrator that is actively exploited and enables remote access to privileged functionality.\n", "creation_timestamp": "2026-09-23T08:41:42.675094Z"}, {"uuid": "7170bd42-8601-46c4-8201-6acbf2a64abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mw6dtxvo462i", "content": "Arista released urgent patches for a zero-day CVE-2026-93952 in on-prem VeloCloud Orchestrator that is actively exploited and enables remote access to privileged functionality.\n", "creation_timestamp": "2026-09-23T08:41:44.064905Z"}, {"uuid": "6d166504-9b4e-49fc-aba0-062196b2ad56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117319534208953341", "content": "CVE-2026-93952: CRITICAL zero-day in Arista VeloCloud Orchestrator (on-prem <5.2.3.16, <6.4.2.8) is actively exploited. Remote attackers can access privileged functions w/o creds. Patch now \u2014 review logs for signs of compromise. https://radar.offseq.com/threat/arista-urges-immediate-patching-of-exploited-vco-zero-day-0c28c2caa003025a #OffSeq #Arista #ZeroDay #Infosec", "creation_timestamp": "2026-09-23T09:00:26.134444Z"}, {"uuid": "32461093-658c-4f95-a69f-66afaceba74d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw6evhuyiq2q", "content": "CRITICAL zero-day (CVE-2026-93952) impacts Arista VeloCloud Orchestrator (on-prem <5.2.3.16, <6.4.2.8). Remote attackers can exploit without credentials. Patch immediately. https://radar.offseq.com/threat/arista-urges-immediate-patching-of-exploited-vco-zero-day-0c28c2caa003025a #OffSeq #ZeroDay ...", "creation_timestamp": "2026-09-23T09:00:28.197714Z"}, {"uuid": "66b489ba-ccbe-41b8-9528-e55509e3da0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mw6jwdjcam27", "content": "Arista released urgent patches for CVE-2026-93952, a critical exploited zero-day in VeloCloud Orchestrator On-Prem that can expose privileged internal functions and impact confidentiality, integrity, and availability. #Arista #VeloCloud #CVE202693952", "creation_timestamp": "2026-09-23T10:30:26.070351Z"}, {"uuid": "3761dbf6-e228-4774-a6a6-0ef763c18f0d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec6923e9-01bf-4e63-b522-ee4566299eb4", "content": "", "creation_timestamp": "2026-09-23T11:00:59.522693Z"}, {"uuid": "35d76918-3138-494d-9580-fe1d5dd99128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mw6tf3qbq322", "content": "\ud83e\udd16 CVE-2026-93952: actively exploited zero-day in Arista VeloCloud Orchestrator. Remote, low-complexity, no credentials needed \u2014 improper input validation in cert-based auth. Listed in CISA KEV, patch by Sep\u2026", "creation_timestamp": "2026-09-23T13:19:44.205773Z"}, {"uuid": "004d9ee0-7c34-48b7-9212-f73a4a726f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://bsky.app/profile/0daynews.bsky.social/post/3mw6xes6fhr2o", "content": "Arista VeloCloud Orchestrator hits KEV with a max-severity unauthenticated RCE (CVE-2026-93952, CVSS 10.0). CISA deadline\u2026 https://0daynews.com/articles/2026-09-23-arista-velocloud-cve-2026-93952-cvss10-kev/?utm_source=bluesky&utm_medium=organic_social&utm_campaign=always_on&utm_content=hub-3403", "creation_timestamp": "2026-09-23T14:31:10.022433Z"}, {"uuid": "fa82903e-56fa-4692-aa34-26137d3f23ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/entorisec.bsky.social/post/3mw74pckc6v22", "content": "Arista patched CVE-2026-93952 today, a CVSS 10.0 flaw in VeloCloud Orchestrator letting unauthenticated attackers reach privileged internal functions. Arista says it is actively exploited. Fixes are out for the 5.2 and 6.4 trains; 6.1 and 7.0 are still waiting. CISA added it to KEV.", "creation_timestamp": "2026-09-23T16:06:31.239990Z"}, {"uuid": "b674cb30-8e0f-4bf4-b668-36b04a182f3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mw74jrobxm2l", "content": "~Cisa~\nCISA added four actively exploited vulnerabilities to its KEV Catalog; prioritize rapid remediation.\n-\nIOCs: CVE-2026-85102, CVE-2026-93616, CVE-2026-93952\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-09-23T16:03:25.682447Z"}, {"uuid": "9468a1a1-e32e-45e0-a193-1733663bc6bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://t.me/bdufstecru/3476", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 VeloCloud Orchestrator (VCO) On-Prem \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438 VMware SD-WAN by VeloCloud \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\nBDU:2026-15063\nCVE-2026-93952\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183", "creation_timestamp": "2026-09-23T19:00:05.169959Z"}, {"uuid": "e24d20e4-bc2c-40fa-8d12-3d8dbb9710dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mwa7wwfqai2h", "content": "\ud83d\udccc CVE-2026-93952 - VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and... https://www.cyberhub.blog/cves/CVE-2026-93952", "creation_timestamp": "2026-09-24T02:37:07.355107Z"}, {"uuid": "9733aea2-b7ff-4ebd-ad50-7cb3f953f95b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93952", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mwaelzmwpm2g", "content": "\ud83d\udcf0 Arista Rilis Patch untuk Zero-Day VeloCloud Orchestrator yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/24/cve-2026-93952-velocloud-orchestrator-zero-day/\n\n#arista #cisa #cve #cybersecurity #keamananJaringan #sd-wan #velocloud #velocloudOrchestrator #", "creation_timestamp": "2026-09-24T04:00:30.332733Z"}, {"uuid": "bce9736e-1dba-494a-9bae-bf953f85afce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mwai2sjtsc2q", "content": "Daily IT Security Digest \u2014 2026-09-24\nare no workarounds \u2014 only patching resolves the issue.\nhttps://radar.offseq.com/threat/cisco-warns-ise\n\n## 6. Arista VeloCloud Orchestrator Zero-Day (CVE-2026-93952)\nAn actively exploited critical zero-day in on-premise Arista VeloCloud Orchestrator (versions", "creation_timestamp": "2026-09-24T05:02:27.651708Z"}, {"uuid": "ab9860f7-a2cb-4232-b8a1-1c1c927549bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "exploited", "source": "https://t.me/thehackernews/10126", "content": "\u203c\ufe0f WARNING - Attackers are actively exploiting a new CVSS 10.0 VeloCloud Orchestrator vulnerability.\n\nOnly VCOs using certificate-based Edge authentication are exposed. Fixes for the 6.1 and 7.0 release trains are still pending.\n\nLearn more about CVE-2026-93952 here \u2192 https://thehackernews.com/2026/09/new-cvss-100-velocloud-orchestrator.html", "creation_timestamp": "2026-09-22T16:15:16.000000Z"}]}