#velocloud


Arista patches actively exploited VeloCloud Orchestrator zero-day

Sep 23, 2026 // 15:36

Arista Networks has released security patches for a zero-day flaw that is being actively exploited and affects VeloCloud Orchestrator (VCO) On-Prem deployments. VCO is a […]

New CVSS 10.0 VeloCloud Orchestrator Flaw Actively Exploited in Certificate-Based Setups

Sep 22, 2026 // 15:42

Attackers are exploiting a new flaw in on-premises VeloCloud Orchestrator (VCO), the server that manages the Edge devices in a VeloCloud SD-WAN, Arista said on […]

Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw

Jul 28, 2026 // 07:50

A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 […]

Arista patches VeloCloud Orchestrator zero-day exploited in attacks

Jul 28, 2026 // 01:56

Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. The vulnerability, tracked as CVE-2026-16812, […]