Security vulnerabilities in Arista products, including the VeloCloud Orchestrator SD-WAN platform. Management-plane flaws in SD-WAN infrastructure carry broad network impact across every connected site. Combined article + CVE feed for the Arista beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2026-16812/https://0daynews.com/cve/cve-2026-16812/CVSS 10.0 critical. Remote attackers can inject OS commands into Arista VeloCloud Orchestrator On-Prem, compromising the SD-WAN management plane.Sat, 15 Aug 2026 00:00:00 GMTAristacriticalcvehttps://0daynews.com/cve/cve-2026-7473/https://0daynews.com/cve/cve-2026-7473/Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP.Sat, 15 Aug 2026 00:00:00 GMTAristamediumcvehttps://0daynews.com/articles/2026-07-27-arista-velocloud-cve-2026-16812-kev/https://0daynews.com/articles/2026-07-27-arista-velocloud-cve-2026-16812-kev/Arista VeloCloud Orchestrator has a CVSS 10.0 OS command injection flaw under active exploitation. CISA added it to KEV July 27. Patch on-prem deployments now.Tue, 28 Jul 2026 10:00:00 GMTAristaarticle