SecurityBleepingComputerabout 1 hour ago
Arista patches VeloCloud Orchestrator zero-day exploited in attacks
1 min read
Arista patched CVE-2026-16812, a maximum-severity unauthenticated OS command injection flaw in on-premises VeloCloud Orchestrator. The vulnerability scores 10.0 and is actively exploited. Fixed in VCO versions 5.2.3.14, 6.1.3.4, and 6.4.2.4. CISA added it to the Known Exploited Vulnerabilities catalog.
Level
Hype check
Tap to vote and see what everyone thinks.
