{"uuid": "c953d9af-87a0-43b4-83db-e92a75b89c5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93952", "type": "seen", "source": "https://infosec.exchange/ap/users/117064736050780246/statuses/117315207195568331", "content": "Arista disclosed active exploitation of CVE-2026-93952, a CVSS 10.0 unauthenticated flaw in on-prem VeloCloud Orchestrator with certificate authentication enabled. Compromise of the management plane risks full SD-WAN Edge control and lateral movement. Isolate exposed instances and hunt for abuse. #VeloCloud #ThreatIntel #InfoSec\nhttps://cyberworldops.eu/en/active-attacks-target-certificate-enabled-velocloud-orchestrator", "creation_timestamp": "2026-09-22T19:07:39.642184Z"}