ThreatVectr
Tag

#SD-WAN

7 stories taggedSD-WAN.

Illustration: a dimly lit server rack in a corporate data centre
Vulnerabilities

A critical flaw in Arista's VeloCloud Orchestrator is being exploited in the wild

CISA has added CVE-2026-114625, a SQL injection bug in Arista's VeloCloud Orchestrator, to its must-patch list after seeing it used in real attacks.

4 min read
Illustration: a dimly lit enterprise network operations centre, rows of server racks with amber indicator lights
Vulnerabilities

Cisco SD-WAN flaw gives attackers admin keys, and someone is already using it

CISA gave federal agencies three days to patch CVE-2026-76504 after evidence the authentication bypass is being exploited in the wild.

3 min read
Illustration: a dimly lit enterprise server rack with a single network orchestrator appliance glowing amber
Vulnerabilities

Arista Says a VeloCloud Orchestrator Bug Is Already Being Exploited

A remote attacker with no login can reach privileged functions on the server that runs an entire SD-WAN network. On-prem customers using certificate authentication need to act now.

3 min read
A network operations center displaying SD-WAN infrastructure diagrams with twelve vulnerability indicators highlighted across the topology, three of them marked
Vulnerabilities

Cisco Patches a Dozen Flaws in SD-WAN and IOS XE, Three Rated Critical

An internal Cisco security review turned up 12 vulnerabilities, including three with a severity score of 9.8 out of 10, in software that runs corporate networks worldwide.

3 min read
Network infrastructure diagram on a monitor displaying VeloCloud Orchestrator nodes under attack, with active exploitation indicators spreading across the syste
Vulnerabilities

Arista rushes fix for VeloCloud flaw already being used in attacks

A perfect-10 command injection bug in on-premises VeloCloud Orchestrator lets anyone on the network take over the box. Attackers found it first.

3 min read
Illustration: a rack-mounted enterprise SD-WAN router in a dim data center aisle, status LEDs glowing amber and green
Vulnerabilities

Cisco Catalyst SD-WAN Bug Hit as Zero-Day Months Before Disclosure

Mandiant says an unidentified actor exploited CVE-2026-20245 for at least two months before Cisco's public advisory, gaining root on affected appliances.

3 min read
Illustration: a darkened enterprise network operations room
Vulnerabilities

Cisco Patches Catalyst SD-WAN Manager Bug Already Seeing In-the-Wild Abuse

CVE-2026-20262 lets an authenticated remote user write files on the appliance. Cisco confirms exploitation. Severity is rated medium, but the access it enables is not.

3 min read
© 2026 Threat Vectr