Developing3 outlets · over 6 hours
Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day
Arista patched CVE-2026-16812, a maximum-severity OS command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is actively exploited. The unauthenticated flaw scores 10.0 and allows remote attackers to access privileged internal functionality, compromising confidentiality, integrity, and availability.
The story so far2 updates, latest first.
Tracked by ByteBrief