ThreatVectr
Tag

#VeloCloud

3 stories taggedVeloCloud.

Illustration: a dimly lit server rack in a corporate data centre
Vulnerabilities

A critical flaw in Arista's VeloCloud Orchestrator is being exploited in the wild

CISA has added CVE-2026-114625, a SQL injection bug in Arista's VeloCloud Orchestrator, to its must-patch list after seeing it used in real attacks.

4 min read
Illustration: a dimly lit enterprise server rack with a single network orchestrator appliance glowing amber
Vulnerabilities

Arista Says a VeloCloud Orchestrator Bug Is Already Being Exploited

A remote attacker with no login can reach privileged functions on the server that runs an entire SD-WAN network. On-prem customers using certificate authentication need to act now.

3 min read
Network infrastructure diagram on a monitor displaying VeloCloud Orchestrator nodes under attack, with active exploitation indicators spreading across the syste
Vulnerabilities

Arista rushes fix for VeloCloud flaw already being used in attacks

A perfect-10 command injection bug in on-premises VeloCloud Orchestrator lets anyone on the network take over the box. Attackers found it first.

3 min read
© 2026 Threat Vectr