Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A critical command injection vulnerability, CVE-2026-16812, has been discovered in the Arista VeloCloud Orchestrator On-Prem platform, allowing unauthenticated remote attackers to execute arbitrary commands. This flaw, with a CVSS score of 10.0, poses significant risks to organizations using the pla...
A critical vulnerability, CVE-2026-93952, has been identified in Arista Networks' VeloCloud Orchestrator (VCO), allowing unauthenticated remote access to privileged internal functionalities. This flaw, rated CVSS 3.1 10.0 and CVSS 4.0 9.5, affects on-premises deployments configured with certificate-...
Fortinet's FortiOS and Arista's VeloCloud Orchestrator On-Prem are currently under attack due to critical vulnerabilities. The FortiOS vulnerability (CVE-2025-68686) allows unauthorized access to confidential information via manipulated HTTP requests, affecting versions 6.4 to 7.6. Arista's VeloClou...
Arista Networks has patched a critical SQL injection vulnerability, CVE-2026-114625, in its VeloCloud Orchestrator (VCO) that allows authenticated users to escalate privileges to superuser status. The flaw, rated 9.9 on the CVSS scale, has been actively exploited in the wild, affecting on-premises d...
