/
countries_code:US × cves:CVE-2026-93952 × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

cisa.gov · · 4 fontes · 4 atualizações critical

Arista patches actively exploited VeloCloud Orchestrator zero-day CVE-2026-114625; CISA adds it to KEV

Arista Networks released security updates for CVE-2026-114625, a critical (CVSS 9.9) zero-day SQL injection in VeloCloud Orchestrator (VCO) that is being actively exploited. Any authenticated user, even with the lowest built-in Enterprise Read Only tenant role, who can reach the VCO web interface can escalate to operator privileges and ma…

CVE-2026-114625 CVE-2026-16812 CVE-2026-93952 government
cisa.gov · critical

CISA adds four exploited flaws in Check Point, Arista VeloCloud Orchestrator and F5 BIG-IP APM to KEV Catalog

CISA added four vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-22, citing evidence of active exploitation. The entries affect Check Point (two flaws in multiple products), Arista VeloCloud Orchestrator and F5 BIG-IP APM. The alert gives no exploitation details, threat actor attribution or IOCs. CISA notes …

CVE-2026-85102 CVE-2026-93616 CVE-2026-93952 government