Skip to content
OpenAdvisories

Vendor

Arista Networks

191 known vulnerabilities.

Products

EOS 101 CloudVision Portal 12 Arista Edge Threat Management 9 CloudVision CUE 9 Wi-Fi Access Points 7 Arista EOS 7 Metamako Operating System 6 DANZ Monitoring Fabric 5 Arista Edge Threat Management - Arista Next Generation Firewall (NGFW) 5 NG Firewall 5 VeloCloud Edge 3 Arista Edge Threat Management - Arista Next Generation Firewall 3 EOS / CloudVision eXchange (CVX) 3 VeloCloud Orchestrator On-Prem 3 Terminattr 2 Arista TerminAttr 2 MOS 2 CloudVision Sensor 1 CloudVision Appliance 1 Arista Edge Threat Management - Arista NG Firewall (NGFW) 1 VeloCloud Orchestrator (VCO) On-Prem 1 CloudVision 1 VeloCloud 1 VeloCloud Gateway 1 Wi-Fi Access Point 1 Arista Wireless Access Points 1 EOS-Policy Based Routing (PBR) 1 EOS - BGP Flowspec 1 EOS - Interface Traffic Policy 1 VeloCloud Orchestrator 1 EOS < 4.28.7M 0 EOS < 4.27.10M 0 EOS < 4.28.3M 0 EOS < 4.26.8M 0 EOS < 4.24.11M 0 EOS < 4.23.13M 0 EOS < 4.22.13M 0 WiFi Access Point 0 EOS < 4.24.11 0 WiFi Access Point < 12.0.1-48.10 0
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-114625 Exploited Public exploit

    Security Advisory 0199

    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability…

    Arista Networks VeloCloud Orchestrator Network devices
    KEV Oct 23, 2026
  • Critical 10.0
    CVE-2026-93952 Exploited

    Security Advisory 0183

    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability…

    Arista Networks VeloCloud Orchestrator (VCO) On-Prem Network devices
    KEV Sep 22, 2026
  • Critical 10.0
    CVE-2026-16812 Exploited

    VeloCloud Orchestrator OS Command Injection

    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability…

    Arista Networks VeloCloud Orchestrator On-Prem Network devices
    KEV Jul 27, 2026
  • Medium 5.8
    CVE-2026-7473 Exploited Public exploit

    Arista EOS Unexpected Tunnel Protocol Decapsulation and Forwarding Bypass

    On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward…

    Arista Networks EOS Network devices
    KEV Jun 9, 2026