// tag

Arista

Security incidents tagged Arista. Newest first.

## 2 Arista incidents in the last 12 months

crit 4 · high 3 · med 2 · low 1 · upd ½severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½lessmore

show 2 older incidents

Jul 27highArista VeloCloud Orchestrator: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerabilitypatched
› Arista VeloCloud Orchestrator patched
Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by the orchestrator. Added to CISA KEV on 2026-07-27.
open incident →CVE-2026-16812

Jun 9highArista Extensible Operating System: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerabilitypatched
› Arista Extensible Operating System patched
Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP. Added to CISA KEV on 2026-06-09.
open incident →CVE-2026-7473