PHP Vulnerability Responses by Company

Arista Networks

Global cloud / infrastructure
Aliases / services
Arista Networks / CloudVision CUE / Edge Threat Management / Arista ETM / Untangle / arista.com
Official website
https://www.arista.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

EOS-based products

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Networking and cloud management products.

Advisory 0200 explicitly lists this product as unaffected.

Scope: Covers listed EOS platforms, CloudEOS, cEOS/vEOS-lab and CloudVision eXchange.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Official service URL

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

Wi-Fi Access Points

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Assessment for the access points themselves.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

CloudVision CUE cloud service

Response status
Patches applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 reports completed upgrades to fixed PHP versions.

Scope: Previously affected and remediated by the provider; distinct from on-premises CUE.

What users should do

No customer action is required for this issue.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

CloudVision Portal on-premises

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Includes virtual/physical appliances and CV-CUE on-premises; added on 26 October.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

CloudVision Appliance Software

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Explicit assessment of appliance software.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

CloudVision as-a-Service

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: A distinct offering from the remediated CUE cloud service.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

CloudVision AGNI

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Both cloud delivery and virtual/physical appliances are listed.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

7130 Systems running MOS

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: MOS scope is distinguished from EOS-based 7130 systems.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

Converged Cloud Fabric

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Product formerly known as Big Switch BCF.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

DANZ Monitoring Fabric (DMF)

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Includes controller, analytics, recorder and service nodes; formerly Big Switch BMF.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

Multi Cloud Director

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Product formerly known as Big Switch MCD.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

Arista NDR

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Formerly Awake NDR; no inference for unrelated monitoring products.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

Edge Threat Management

Response status
Patches applied
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 reports completed upgrades to fixed PHP versions.

Scope: Includes NG Firewall and Micro Edge, formerly Untangle; previously affected and fixed.

What users should do

No customer action is required for this issue.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

NetVisor and Insight Analytics

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: NetVisor OS, UNUM and Insight Analytics, formerly Pluribus.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence

VeloCloud

Response status
Unaffected
Response information checked
2026-10-28

Current re-audit: Official response verified · Research date: 2026-10-28

Advisory 0200 explicitly lists this product as unaffected.

Scope: Explicitly covers Orchestrator, Gateway and Edge, formerly supplied by Broadcom.

What users should do

Confirm the product and delivery model; contact TAC with questions.

Source URLs

  1. https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200https://www.arista.com/ko/support/advisories-notices/security-advisory/24846-security-advisory-0200Response evidence
Related official sources
  1. PHP2Shell response and scopeOfficial notice

Comments