Arista patches actively exploited VeloCloud Orchestrator zero-day — September 23, 2026

Arista Networks released security patches for maximum-severity zero-day vulnerability CVE-2026-93952, which is being actively exploited and affects on-premises VeloCloud Orchestrator deployments.