CVE-2026-16812 CISA KEV · Actively exploited
OS command injection in Arista Velocloud Orchestrator
CVSS score
10.0
EPSS probability
%1.0
Risk score
0.2
Published
2 mo ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
CISA Expands KEV Catalog with FortiOS and Arista VeloCloud Flaws
The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) Catalog by adding two vulnerabilities affecting Fortinet FortiOS and Arista VeloCloud Orchestrator. While the two flaws…
Similar Vulnerabilities
8.1
CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
Patch verified Public Exploits:8EPSS %100
7.8
CVE-2026-31431 Actively exploitedcrypto: algif_aead - Revert to operating out-of-place
Patch verified Public Exploits:4EPSS %3
6.5
10.0
6.5
8.8
CVE-2020-3973SQL injection in Arista Velocloud Orchestrator
Patch status unknownEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-16812"