CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2026-9395210.0/CRITICALEPSS 1.4%CISA KEV

2026-09-22

Arista VeloCloud Orchestrator (VCO) Remote Code Execution and Privilege Escalation (CVE-2026-93952)

[Affected Scope] Arista VeloCloud Orchestrator (VCO) On-premise deployments.

[Impact] Unauthenticated remote attackers can access privileged internal functions, leading to full compromise of the orchestrator and managed SD-WAN infrastructure.

[Mitigation] Immediately apply the latest security patches from Arista and restrict access to management interfaces via VPN/ACLs.

RCE Privilege Escalation SD-WAN CISA-KEV Critical

Full Advisory & Mitigation

CVE-2018-69618.1/HIGHEPSS 85.3%CISA KEV

2018-06-11

VMware NSX SD-WAN Edge (VeloCloud) Local Web UI Remote Command Injection and Code Execution (CVE-2018-6961)

[Affected Scope] VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 with the local web UI component enabled.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges, leading to complete compromise of the SD-WAN appliance.

[Mitigation] Immediately upgrade to version 3.1.0 or higher, or disable the local web UI service and restrict access from untrusted networks.

cve-2018-6961 command-injection rce velocloud sd-wan CWE-78

Full Advisory & Mitigation