Skip to content
Edition of Sunday, November 8, 2026
Daily CISO

The five-minute briefing for security leaders.

Security vendor · Network detection and response · in CISA KEV

Arista Networks in the CISA KEV catalog

CISA’s Known Exploited Vulnerabilities catalog lists 4 entries for Arista Networks as of catalog version 2026.11.06, released November 6, 2026. The newest was added October 23, 2026, and the latest federal due date is October 26, 2026.

Updated

entries in the catalog
4
newest addition
October 23, 2026
latest federal due date
October 26, 2026
marked known ransomware use
0

Directory record

Website
www.arista.com
Category
Network detection and response
Headquarters
Santa Clara, United States
Founded
Not established
Ownership
Public (NYSE: ANET)
Company record
Arista Networks on CISO Tribune

Directory data as of November 8, 2026. What the company sells, and the source for every fact, is on its CISO Tribune page.

KEV entries, newest first

Filed by CISA under the name “Arista”. Each row links to the CVE’s NVD record; entries added in the last 45 days also link to their place on must-patch. The due date is CISA’s remediation deadline for federal civilian agencies, as the feed states it.

  1. Added October 23, 2026

    CVE-2026-114625 Arista VeloCloud Orchestrator SQL Injection Vulnerability

    VeloCloud Orchestrator · on must-patch

    Due October 26, 2026

  2. Added September 22, 2026

    CVE-2026-93952 Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

    VeloCloud Orchestrator

    Due September 25, 2026

  3. Added July 27, 2026

    CVE-2026-16812 Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability

    VeloCloud Orchestrator

    Due July 30, 2026

  4. Added June 9, 2026

    CVE-2026-7473 Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability

    Extensible Operating System

    Due June 23, 2026

Snapshot of CISA’s feed taken November 7, 2026; the whole catalog is counted on the KEV tracker.

On Daily CISO, newest first

No briefing or archive item names Arista Networks yet. Every item about a security vendor is on the vendor news page.

Sources

  1. Cybersecurity and Infrastructure Security Agency, KEV catalog · primary source
  2. Cybersecurity and Infrastructure Security Agency, KEV JSON feed (catalog version 2026.11.06), published November 6, 2026 · primary source
  3. CISO Tribune, vendor directory record for Arista Networks, published November 8, 2026