SecuritySecurityWeekabout 2 hours ago
Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day
1 min read
Arista patched CVE-2026-16812, a maximum-severity OS command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is actively exploited. The unauthenticated flaw scores 10.0 and allows remote attackers to access privileged internal functionality, compromising confidentiality, integrity, and availability.
Level
Hype check
Tap to vote and see what everyone thinks.
