GCVE-110-NCSC-2026-385

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published September 22, 2026

A remote vulnerability in VeloCloud Orchestrator (VCO) on-prem enables attackers to access privileged internal functions, with operators advised to monitor web access, backend, and system logs for suspicious activity and preserve evidence if compromise is suspected.

Download JSON Open in Console

Risk Scores

CVSS 3.1

10.0/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Arista Networks	vers:unknown/*	—	—
Arista	vers:unknown/*	—	—

Aliases

CVE-2026-93952

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON