CVE-2026-93952
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation m...
Affects 0 products across 1 vendor.
Software does not validate or incorrectly validates input, allowing attackers to craft data processed in unintended ways.
Show all 51
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A critical severity vulnerability (CVE-2026-93952) affects the target system. VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and ava...
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2026-93952?
What is the CVSS score for CVE-2026-93952?
Is CVE-2026-93952 actively exploited?
How do I remediate CVE-2026-93952?
What systems are affected by CVE-2026-93952?
| CVE ID | CVE-2026-93952 |
|---|---|
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| Published | 2026-09-22 |
| Last Modified | 2026-09-23 |
| ICS Relevance | 0% |
| Weakness (CWE) | |
| Source | NVD |
VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Hosted, including Dedicated, versions of VCO were impacted and have already been patched.
Source: NIST NVD / MITRE CVE Database
| Vendor | Product | Affected Versions |
|---|---|---|
| Arista | — | — |
| Arista | Velocloud Orchestrator | ≥ 5.2.0, < 5.2.3.16 ≥ 6.1.0, ≤ 6.1.3.7 ≥ 6.4.0, < 6.4.2.8 ≥ 7.0.0, ≤ 7.0.0.2 |
| CISA known-exploited | ● Active Exploitation Confirmed (added 2026-09-22) |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
This Vulnerability Is Being Actively Exploited
CVE-2026-93952 is on the CISA known-exploited list - confirmed active exploitation in the wild. BreachSpider flags known-exploited CVEs on the ICS assets they affect, with known-exploited status synced daily from CISA.
Create a free account →