{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:34.245Z","products":["arista"],"actNowTotal":2,"results":[{"query":"arista","matched":2,"actNow":2,"events":[{"id":"kev-2026-10-23-arista-velocloud-orchestrator","url":"https://securitythreatpulse.com/events/kev-2026-10-23-arista-velocloud-orchestrator","title":"Arista VeloCloud Orchestrator: attackers can read or change its database","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 19 days old, so many systems are likely still unpatched. It affects a product that faces the internet or gives remote access. The severity score is critical (9.4).","tier":"now","rankScore":6,"rankWhy":["Exploitation is confirmed by an authoritative source.","The product faces the internet or gives remote access.","The confirmation is 19 days old."],"rulesVersion":"v3","ladder":{"talk":"confirmed","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-114625"],"vendor":"Arista","product":"VeloCloud Orchestrator","affectedProducts":[{"kind":"direct","slug":"arista/velocloudorchestrator","vendor":"Arista","product":"VeloCloud Orchestrator","evidence":["kev","cpe"],"vendorKey":"arista","productKey":"velocloudorchestrator"}],"category":{"id":"edge","label":"VPN, firewall or gateway","why":"It sits at the edge of your network and faces the internet, so attackers can reach it directly.","doThis":"If you have it, patch it today. If you cannot, block access to it from the internet until you can."},"summary":"Arista VeloCloud Orchestrator on-prem contains a SQL injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.","cvss":9.4,"epss":0.01025,"exploitMaturity":"poc","kevListed":true,"kevDateAdded":"2026-10-23","kevDueDate":"2026-10-26","firstSeenAt":"2026-10-23T00:00:00.000Z","updatedAt":"2026-11-11T00:00:06.173Z","newestEvidenceAt":"2026-10-29T18:25:06.802Z"},{"id":"kev-2026-09-22-arista-velocloud-orchestrator","url":"https://securitythreatpulse.com/events/kev-2026-09-22-arista-velocloud-orchestrator","title":"Arista VeloCloud Orchestrator: security flaw used in attacks","verdict":"act_now","verdictReason":"Attacks are confirmed. The vulnerability is 50 days old, so many systems are likely still unpatched. It affects a product that faces the internet or gives remote access. The severity score is critical (9.5).","tier":"now","rankScore":5,"rankWhy":["Exploitation is confirmed by an authoritative source.","The product faces the internet or gives remote access."],"rulesVersion":"v3","ladder":{"talk":"none","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2026-93952"],"vendor":"Arista","product":"VeloCloud Orchestrator","affectedProducts":[{"kind":"direct","slug":"arista/velocloudorchestrator","vendor":"Arista","product":"VeloCloud Orchestrator","evidence":["kev"],"vendorKey":"arista","productKey":"velocloudorchestrator"},{"kind":"direct","slug":"arista/velocloudorchestratorvcoonprem","vendor":"Arista","product":"Velocloud Orchestrator (vco) On-prem","evidence":["cpe"],"vendorKey":"arista","productKey":"velocloudorchestratorvcoonprem"}],"category":{"id":"edge","label":"VPN, firewall or gateway","why":"It sits at the edge of your network and faces the internet, so attackers can reach it directly.","doThis":"If you have it, patch it today. If you cannot, block access to it from the internet until you can."},"summary":"Arista VeloCloud Orchestrator (VCO) on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator.","cvss":9.5,"epss":0.01384,"exploitMaturity":"none","kevListed":true,"kevDateAdded":"2026-09-22","kevDueDate":"2026-09-25","firstSeenAt":"2026-09-22T00:00:00.000Z","updatedAt":"2026-11-11T08:00:07.905Z","newestEvidenceAt":"2026-09-22T07:37:24.300Z"}]}]}