Mapping VeloCloud Orchestrator Exposure: What ZoomEye Data Says About CVE-2026-93952
Mapping VeloCloud Orchestrator Exposure: What ZoomEye Data Says About CVE-2026-93952 Why exposure data matters for this flaw CVE-2026-93952 is a CVSS 10.0 vulnerability in on-premises VeloCloud Orchestrator (VCO), and Arista Networks confirms it is actively exploited. When a flaw is already being used in the wild, the useful question shifts from "is this real?" to "how much of the internet could…
The CVE-2026-93952 vulnerability in VeloCloud Orchestrator (VCO) is actively being exploited, with Internet-wide scanning data indicating a potential exposure of a significant portion of the internet. ZoomEye's data shows that 6,050 internet-reachable systems have HTTP body content containing the VeloCloud string, indicating exposure.
However, it is important to note that this figure does not confirm the vulnerability status of the systems. The data suggests that VCO systems should be behind strict access controls, as they are currently reachable from the public internet. Remediation steps include upgrading to a fixed build, restricting web interface access, and reviewing system logs for potential backdoor activity.
Brief written by urgent.news from Dev.to's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
