Source profile

arista.com

Evidence-bounded context

A field appears only when the current profile revision carries supporting evidence. Missing context stays visibly unknown.

Source classes: Not yet evidenced
Ownership: Not yet evidenced
Funding ties: Not yet evidenced
Declared affiliations: Not yet evidenced
Geographic base: Not yet evidenced
Methodology: Not yet evidenced

Current clusters

build1 distinct publisher

Arista names four fixed VCO builds for a command injection already in use

CVE-2026-16812 scores 10.0 on both CVSS scales because the scope metrics say a compromise of the orchestrator host does not stay inside the orchestrator, and on-prem operators are the ones who have to schedule the fix.

Publishers:arista.com

Reality

Evidence62
Adoption35