Product by Arista Networks
VMware SD-WAN by VeloCloud
5 known vulnerabilities in VMware SD-WAN by VeloCloud (Arista Networks), 4 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
4
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-31431 | Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability In CISA KEValso in 37 other products | 7.8 | |
| Critical | CVE-2026-93952 | Security Advisory 0183 In CISA KEValso in 1 other product | 10.0 | |
| Critical | CVE-2026-114625 | Security Advisory 0199 In CISA KEValso in 1 other product | 9.9 | |
| Critical | CVE-2026-16812 | VeloCloud Orchestrator OS Command Injection In CISA KEValso in 1 other product | 10.0 | |
| High | CVE-2020-3973 | VMware SD-WAN by VeloCloud: security vulnerability | 8.8 |
News
- NCSC-2026-0459 [1.00] [M/H] Kwetsbaarheid verholpen in Arista VeloCloud Orchestrator (VCO) on-premisesncsc-nl,
- On-prem VeloCloud Orchestrator under attack, only some versions patchedcsoonline,
- New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setupsthehackernews,
- Human oversight is still critical as AI patching tools miss security riskscsoonline,
- Frontier LLMs Generate Flawed Patchessans-newsbites-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,