News

Arista patches VeloCloud Orchestrator zero-day exploited in attacks

  • Lawrence Abrams--BleepingComputer
  • published date: 2026-07-27 22:49:44 UTC

Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. [...]

Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. The vulnerability, tracked as CVE… [+4684 chars]